gnh1201/seeddms-code
1
0
Fork 0
mirror of https://git.code.sf.net/p/seeddms/code synced 2025-05-14 05:31:42 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

add legacy access rights for groups

Browse Source
This commit is contained in:
Uwe Steinmann 2019-11-25 09:31:56 +01:00
parent 83e42948ee
commit 7d9de047bd
1 changed files with 96 additions and 82 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
inc/inc.ClassAccessOperation.php
View File

@ -406,7 +406,7 @@ class SeedDMS_AccessOperation {
return false; return false;
} /* }}} */ } /* }}} */
protected function check_view_lecacy_access($view, $get=array()) { /* {{{ */ protected function check_view_legacy_access($view, $get=array()) { /* {{{ */
if($this->user->isAdmin()) if($this->user->isAdmin())
return true; return true;
@ -419,7 +419,19 @@ class SeedDMS_AccessOperation {
} else { } else {
return false; return false;
} }
if(array_intersect($scripts, array(
if($this->user->isGuest()) {
$user_allowed = array(
'Calendar',
'ErrorDlg',
'Help',
'Login',
'Search',
'ViewDocument',
'ViewFolder',
);
} else {
$user_allowed = array(
'AddDocument', 'AddDocument',
'AddEvent', 'AddEvent',
'AddFile', 'AddFile',
@ -479,7 +491,6 @@ class SeedDMS_AccessOperation {
'ReviseDocument', 'ReviseDocument',
'RewindWorkflow', 'RewindWorkflow',
'RunSubWorkflow', 'RunSubWorkflow',
'SearchForm',
'Search', 'Search',
'Session', 'Session',
'SetExpires', 'SetExpires',
@ -498,7 +509,10 @@ class SeedDMS_AccessOperation {
'ViewEvent', 'ViewEvent',
'ViewFolder', 'ViewFolder',
'WorkflowGraph', 'WorkflowGraph',
'WorkflowSummary'))) 'WorkflowSummary');
}
if(array_intersect($scripts, $user_allowed))
return true; return true;
return false; return false;
@ -524,7 +538,7 @@ class SeedDMS_AccessOperation {
*/ */
function check_view_access($view, $get=array()) { /* {{{ */ function check_view_access($view, $get=array()) { /* {{{ */
if(!$this->settings->_advancedAcl) { if(!$this->settings->_advancedAcl) {
return $this->check_view_lecacy_access($view, $get); return $this->check_view_legacy_access($view, $get);
} }
if(is_string($view)) { if(is_string($view)) {
$scripts = array($view); $scripts = array($view);