gnh1201/seeddms-code
1
0
Fork 0
mirror of https://git.code.sf.net/p/seeddms/code synced 2025-03-12 00:45:34 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

controll access on batch operations by advanced access rights

Browse Source
This commit is contained in:
Uwe Steinmann 2025-02-04 08:27:05 +01:00
parent ca29a27187
commit a3ea05177a
1 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
views/bootstrap/class.Search.php
View File

@ -1473,8 +1473,8 @@ $(document).ready(function() {
/* Batch operations {{{ */
if($settings->_batchOperations && $total)
$this->contentHeading(getMLText('batch_operation'));
if($totaldocs || $totalfolders) {
if(in_array('export', $settings->_batchOperations)) {
if(($totaldocs || $totalfolders) && in_array('export', $settings->_batchOperations)) {
if($accessobject->check_view_access($this, array('action'=>'export'))) {
ob_start();
$this->formField(
getMLText("include_content"),
@ -1496,6 +1496,7 @@ $(document).ready(function() {
/* All other batch operations are only allowed for admins */
if($user->isAdmin()) {
if($total && in_array('change_owner', $settings->_batchOperations)) {
if($accessobject->check_view_access($this, array('action'=>'change_owner'))) {
ob_start();
$users = $dms->getAllUsers();
$options = array();
@ -1521,8 +1522,10 @@ $(document).ready(function() {
$content = ob_get_clean();
$this->printAccordion(getMLText('batch_change_owner'), $content);
}
}
if($totaldocs && in_array('add_reviewer', $settings->_batchOperations)) {
if($accessobject->check_view_access($this, array('action'=>'add_reviewer'))) {
ob_start();
$users = $dms->getAllUsers();
$options = array();
@ -1547,8 +1550,10 @@ $(document).ready(function() {
$content = ob_get_clean();
$this->printAccordion(getMLText('batch_add_reviewer'), $content);
}
}
if($totaldocs && in_array('add_approver', $settings->_batchOperations)) {
if($accessobject->check_view_access($this, array('action'=>'add_approver'))) {
ob_start();
$users = $dms->getAllUsers();
$options = array();
@ -1573,8 +1578,10 @@ $(document).ready(function() {
$content = ob_get_clean();
$this->printAccordion(getMLText('batch_add_approver'), $content);
}
}
if($totaldocs && in_array('change_category', $settings->_batchOperations)) {
if($accessobject->check_view_access($this, array('action'=>'change_category'))) {
ob_start();
$cats = $dms->getDocumentCategories();
if($cats) {
@ -1611,6 +1618,7 @@ $(document).ready(function() {
$this->printAccordion(getMLText('batch_change_category'), $content);
}
}
}
}
// }}}