mirror of
https://git.code.sf.net/p/seeddms/code
synced 2025-02-06 15:14:58 +00:00
check for access on document in mytasks and view->menutasks (Ticket #88)
previously documents where listed, even if the user had no access
This commit is contained in:
parent
a560035482
commit
718762d284
|
@ -535,25 +535,37 @@ switch($command) {
|
|||
$resArr = $dms->getDocumentList('ApproveByMe', $user);
|
||||
if($resArr) {
|
||||
foreach ($resArr as $res) {
|
||||
$approvals[] = $res['id'];
|
||||
$document = $dms->getDocument($res["id"]);
|
||||
if($document->getAccessMode($user) >= M_READ && $document->getLatestContent()) {
|
||||
$approvals[] = $res['id'];
|
||||
}
|
||||
}
|
||||
}
|
||||
$resArr = $dms->getDocumentList('ReviewByMe', $user);
|
||||
if($resArr) {
|
||||
foreach ($resArr as $res) {
|
||||
$reviews[] = $res['id'];
|
||||
$document = $dms->getDocument($res["id"]);
|
||||
if($document->getAccessMode($user) >= M_READ && $document->getLatestContent()) {
|
||||
$reviews[] = $res['id'];
|
||||
}
|
||||
}
|
||||
}
|
||||
$resArr = $dms->getDocumentList('ReceiptByMe', $user);
|
||||
if($resArr) {
|
||||
foreach ($resArr as $res) {
|
||||
$receipts[] = $res['id'];
|
||||
$document = $dms->getDocument($res["id"]);
|
||||
if($document->getAccessMode($user) >= M_READ && $document->getLatestContent()) {
|
||||
$receipts[] = $res['id'];
|
||||
}
|
||||
}
|
||||
}
|
||||
$resArr = $dms->getDocumentList('ReviseByMe', $user);
|
||||
if($resArr) {
|
||||
foreach ($resArr as $res) {
|
||||
$revisions[] = $res['id'];
|
||||
$document = $dms->getDocument($res["id"]);
|
||||
if($document->getAccessMode($user) >= M_READ && $document->getLatestContent()) {
|
||||
$revisions[] = $res['id'];
|
||||
}
|
||||
}
|
||||
}
|
||||
$content = $view->menuTasks(array('review'=>$reviews, 'approval'=>$approvals, 'receipt'=>$receipts, 'revision'=>$revisions));
|
||||
|
@ -871,25 +883,37 @@ switch($command) {
|
|||
$resArr = $dms->getDocumentList('ApproveByMe', $user);
|
||||
if($resArr) {
|
||||
foreach ($resArr as $res) {
|
||||
$approvals[] = array('id'=>$res['id'], 'name'=>$res['name']);
|
||||
$document = $dms->getDocument($res["id"]);
|
||||
if($document->getAccessMode($user) >= M_READ && $document->getLatestContent()) {
|
||||
$approvals[] = array('id'=>$res['id'], 'name'=>$res['name']);
|
||||
}
|
||||
}
|
||||
}
|
||||
$resArr = $dms->getDocumentList('ReviewByMe', $user);
|
||||
if($resArr) {
|
||||
foreach ($resArr as $res) {
|
||||
$reviews[] = array('id'=>$res['id'], 'name'=>$res['name']);
|
||||
$document = $dms->getDocument($res["id"]);
|
||||
if($document->getAccessMode($user) >= M_READ && $document->getLatestContent()) {
|
||||
$reviews[] = array('id'=>$res['id'], 'name'=>$res['name']);
|
||||
}
|
||||
}
|
||||
}
|
||||
$resArr = $dms->getDocumentList('ReceiptByMe', $user);
|
||||
if($resArr) {
|
||||
foreach ($resArr as $res) {
|
||||
$receipts[] = array('id'=>$res['id'], 'name'=>$res['name']);
|
||||
$document = $dms->getDocument($res["id"]);
|
||||
if($document->getAccessMode($user) >= M_READ && $document->getLatestContent()) {
|
||||
$receipts[] = array('id'=>$res['id'], 'name'=>$res['name']);
|
||||
}
|
||||
}
|
||||
}
|
||||
$resArr = $dms->getDocumentList('ReviseByMe', $user);
|
||||
if($resArr) {
|
||||
foreach ($resArr as $res) {
|
||||
$revisions[] = array('id'=>$res['id'], 'name'=>$res['name']);
|
||||
$document = $dms->getDocument($res["id"]);
|
||||
if($document->getAccessMode($user) >= M_READ && $document->getLatestContent()) {
|
||||
$revisions[] = array('id'=>$res['id'], 'name'=>$res['name']);
|
||||
}
|
||||
}
|
||||
}
|
||||
header('Content-Type: application/json');
|
||||
|
|
Loading…
Reference in New Issue
Block a user