regular users can no longer set owner of document while uploading

This commit is contained in:
Uwe Steinmann 2021-03-25 16:37:56 +01:00
parent 6defb81dd8
commit 67d8cf39fb
2 changed files with 7 additions and 1 deletions

View File

@ -7,6 +7,7 @@
- list of open tasks will no longer contain expired documents but MyDocuments
page still list them
- fixed downloading approval file (Closes: #503)
- regular users can no longer set owner of document while uploading
--------------------------------------------------------------------------------
Changes in version 6.0.14

View File

@ -582,8 +582,13 @@ class SeedDMS_AccessOperation {
if(!$this->settings->_advancedAcl) {
if($this->user->isGuest())
return false;
else
elseif($this->user->isAdmin())
return true;
else {
if($controller == 'AddDocument' && isset($get['action']) && $get['action'] == 'setOwner')
return false;
return true;
}
}
if(is_string($controller)) {
$scripts = array($controller);