mirror of
https://git.code.sf.net/p/seeddms/code
synced 2025-02-06 15:14:58 +00:00
regular users can no longer set owner of document while uploading
This commit is contained in:
parent
6defb81dd8
commit
67d8cf39fb
|
@ -7,6 +7,7 @@
|
|||
- list of open tasks will no longer contain expired documents but MyDocuments
|
||||
page still list them
|
||||
- fixed downloading approval file (Closes: #503)
|
||||
- regular users can no longer set owner of document while uploading
|
||||
|
||||
--------------------------------------------------------------------------------
|
||||
Changes in version 6.0.14
|
||||
|
|
|
@ -582,8 +582,13 @@ class SeedDMS_AccessOperation {
|
|||
if(!$this->settings->_advancedAcl) {
|
||||
if($this->user->isGuest())
|
||||
return false;
|
||||
else
|
||||
elseif($this->user->isAdmin())
|
||||
return true;
|
||||
else {
|
||||
if($controller == 'AddDocument' && isset($get['action']) && $get['action'] == 'setOwner')
|
||||
return false;
|
||||
return true;
|
||||
}
|
||||
}
|
||||
if(is_string($controller)) {
|
||||
$scripts = array($controller);
|
||||
|
|
Loading…
Reference in New Issue
Block a user