gnh1201/seeddms-code
1
0
Fork 0
mirror of https://git.code.sf.net/p/seeddms/code synced 2025-05-14 21:51:32 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

add legacy access rights for groups

Browse Source
This commit is contained in:
Uwe Steinmann 2019-11-25 09:31:56 +01:00
parent 83e42948ee
commit 7d9de047bd
1 changed files with 96 additions and 82 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

178
inc/inc.ClassAccessOperation.php
View File

@ -406,7 +406,7 @@ class SeedDMS_AccessOperation {
return false; return false;
} /* }}} */ } /* }}} */
protected function check_view_lecacy_access($view, $get=array()) { /* {{{ */ protected function check_view_legacy_access($view, $get=array()) { /* {{{ */
if($this->user->isAdmin()) if($this->user->isAdmin())
return true; return true;
@ -419,86 +419,100 @@ class SeedDMS_AccessOperation {
} else { } else {
return false; return false;
} }
if(array_intersect($scripts, array(
'AddDocument', if($this->user->isGuest()) {
'AddEvent', $user_allowed = array(
'AddFile', 'Calendar',
'AddSubFolder', 'ErrorDlg',
'AddToTransmittal', 'Help',
'ApprovalSummary', 'Login',
'ApproveDocument', 'Search',
'Calendar', 'ViewDocument',
'CategoryChooser', 'ViewFolder',
'ChangePassword', );
'CheckInDocument', } else {
'Clipboard', $user_allowed = array(
'DocumentAccess', 'AddDocument',
'DocumentChooser', 'AddEvent',
'DocumentNotify', 'AddFile',
'DocumentVersionDetail', 'AddSubFolder',
'DropFolderChooser', 'AddToTransmittal',
'EditAttributes', 'ApprovalSummary',
'EditComment', 'ApproveDocument',
'EditDocumentFile', 'Calendar',
'EditDocument', 'CategoryChooser',
'EditEvent', 'ChangePassword',
'EditFolder', 'CheckInDocument',
'EditOnline', 'Clipboard',
'EditUserData', 'DocumentAccess',
'ErrorDlg', 'DocumentChooser',
'FolderAccess', 'DocumentNotify',
'FolderChooser', 'DocumentVersionDetail',
'FolderNotify', 'DropFolderChooser',
'ForcePasswordChange', 'EditAttributes',
'GroupView', 'EditComment',
'Help', 'EditDocumentFile',
'KeywordChooser', 'EditDocument',
'Login', 'EditEvent',
'ManageNotify', 'EditFolder',
'MoveDocument', 'EditOnline',
'MoveFolder', 'EditUserData',
'MyAccount', 'ErrorDlg',
'MyDocuments', 'FolderAccess',
'OpensearchDesc', 'FolderChooser',
'OverrideContentStatus', 'FolderNotify',
'PasswordForgotten', 'ForcePasswordChange',
'PasswordSend', 'GroupView',
'ReceiptDocument', 'Help',
'ReceiptSummary', 'KeywordChooser',
'RemoveDocumentFile', 'Login',
'RemoveDocument', 'ManageNotify',
'RemoveEvent', 'MoveDocument',
'RemoveFolderFiles', 'MoveFolder',
'RemoveFolder', 'MyAccount',
'RemoveTransmittal', 'MyDocuments',
'RemoveVersion', 'OpensearchDesc',
'RemoveWorkflowFromDocument', 'OverrideContentStatus',
'ReturnFromSubWorkflow', 'PasswordForgotten',
'ReviewDocument', 'PasswordSend',
'ReviewSummary', 'ReceiptDocument',
'ReviseDocument', 'ReceiptSummary',
'RewindWorkflow', 'RemoveDocumentFile',
'RunSubWorkflow', 'RemoveDocument',
'SearchForm', 'RemoveEvent',
'Search', 'RemoveFolderFiles',
'Session', 'RemoveFolder',
'SetExpires', 'RemoveTransmittal',
'SetRecipients', 'RemoveVersion',
'SetReviewersApprovers', 'RemoveWorkflowFromDocument',
'SetRevisors', 'ReturnFromSubWorkflow',
'SetWorkflow', 'ReviewDocument',
'SubstituteUser', 'ReviewSummary',
'TransmittalMgr', 'ReviseDocument',
'TriggerWorkflow', 'RewindWorkflow',
'UpdateDocument', 'RunSubWorkflow',
'UserDefaultKeywords', 'Search',
'UserImage', 'Session',
'UsrView', 'SetExpires',
'ViewDocument', 'SetRecipients',
'ViewEvent', 'SetReviewersApprovers',
'ViewFolder', 'SetRevisors',
'WorkflowGraph', 'SetWorkflow',
'WorkflowSummary'))) 'SubstituteUser',
'TransmittalMgr',
'TriggerWorkflow',
'UpdateDocument',
'UserDefaultKeywords',
'UserImage',
'UsrView',
'ViewDocument',
'ViewEvent',
'ViewFolder',
'WorkflowGraph',
'WorkflowSummary');
}
if(array_intersect($scripts, $user_allowed))
return true; return true;
return false; return false;
@ -524,7 +538,7 @@ class SeedDMS_AccessOperation {
*/ */
function check_view_access($view, $get=array()) { /* {{{ */ function check_view_access($view, $get=array()) { /* {{{ */
if(!$this->settings->_advancedAcl) { if(!$this->settings->_advancedAcl) {
return $this->check_view_lecacy_access($view, $get); return $this->check_view_legacy_access($view, $get);
} }
if(is_string($view)) { if(is_string($view)) {
$scripts = array($view); $scripts = array($view);