Uwe Steinmann
51fa5d18e6
enhance AccessOperation by check_view_access()
...
all methods in SeedDMS_AccessOperation take the object to be checked
as the first parameter. Add new method check_view_access() which
checks if a view may be accessed based on the tables tblAros, tblAcos,
tblArosAcos
2016-03-03 07:39:04 +01:00
Uwe Steinmann
c4f7223293
Merge branch 'seeddms-5.0.x' into develop
2015-08-07 13:13:14 +02:00
Uwe Steinmann
482143c04f
pass $dms to contructor of SeedDMS_AccessOperation
2015-08-07 13:11:50 +02:00
Uwe Steinmann
463e94ee8a
Merge branch 'seeddms-4.3.x' into seeddms-5.0.x
...
Conflicts:
CHANGELOG
Makefile
SeedDMS_Core/Core/inc.ClassDMS.php
SeedDMS_Core/package.xml
inc/inc.Utils.php
inc/inc.Version.php
install/install.php
op/op.ApproveDocument.php
op/op.Login.php
op/op.RemoveDocumentLink.php
op/op.ReviewDocument.php
out/out.SetReviewersApprovers.php
views/bootstrap/class.Bootstrap.php
2015-06-30 07:05:27 +02:00
Uwe Steinmann
d070f6da85
use access operations to check if operation is allowed
...
before, this was some own code which did not same the same
check as maySetReviewerApprover()
2015-06-26 12:23:09 +02:00
Uwe Steinmann
330ea9a10f
fix wrong access on settings array
...
Conflicts:
out/out.SetReviewersApprovers.php
2015-06-01 14:06:34 +02:00
Uwe Steinmann
d32df44f7b
fix wrong access on settings array
2015-06-01 14:03:16 +02:00
Uwe Steinmann
4e6081bacc
fix wrong access on $settings
2015-05-29 20:45:34 +02:00
Uwe Steinmann
aa38261ebf
check if version modification is allowed
2015-04-20 13:47:34 +02:00
Uwe Steinmann
0e1571c6c8
check if version modification is allowed
2015-04-20 13:41:35 +02:00
Uwe Steinmann
d33b17f64c
include inc/inc.Init.php, fix order of include files
2014-12-08 14:48:23 +01:00
Uwe Steinmann
670247ae25
pass accessobject to view
2014-07-28 09:52:31 +02:00
Uwe Steinmann
e1f2c63c2a
pass enable_OwnerRevApp and enable_SelfRevApp to view::show
2013-02-27 17:12:11 +01:00
steinm
2f8aef9165
use new views
2012-12-14 08:34:56 +00:00
steinm
81c0bd8a7e
- output name and login of user in lists
2012-09-11 13:00:43 +00:00
steinm
5e11a14c42
- fixed possible xss security holes
2012-09-05 21:00:14 +00:00
steinm
75c2adcfc6
- prevent XSS attacs
2012-08-28 07:18:00 +00:00
steinm
8c6b19f38a
- changed line endings from dos to unix
2012-02-13 08:29:10 +00:00
steinm
73f4c8d90d
- use htmlspecialchars() whenever data from the database is output
...
(this does currently break the output, because data was already
encoded when saved)
2011-12-02 16:23:36 +00:00
steinm
3e1d956fba
- do not include LetoDMS_Core.php anymore it is now include bei inc.DBInit.php
2011-01-20 12:39:25 +00:00
steinm
8a84bc3b51
- rename all classes belonging to the core of LetoDMS into LetoDMS_Core_xxx
...
- move them all into LetoDMS_Core
2011-01-20 08:18:37 +00:00
steinm
5e70f949f7
- do not include inc.DBAccess.php, because it is included by inc.ClassDMS.php
2011-01-14 19:45:29 +00:00
steinm
955be450f3
- getFolderPathHTML() is now a function in inc/inc.Utils.php because
...
it uses links only known by the calling application
2010-12-22 08:50:57 +00:00
steinm
72defaaacf
- no need to include inc.FileUtils.php anymore. It is included
...
by LetoDMS_DMS
2010-11-25 21:28:59 +00:00
steinm
35b663eb74
- inc.ClassAccess is now included by inc.ClassDMS.php
2010-11-23 08:13:17 +00:00
steinm
a029cd22c2
- filterAccess() and filterUsersByAccess() are now static functions in
...
LetoDMS_DMS and inc.AccessUtils.php is included in inc.ClassDMS.php
2010-11-22 20:42:19 +00:00
steinm
4678218f1a
- moved function to admin users and groups in LetoDMS_DMS
2010-11-15 12:01:21 +00:00
steinm
cfd3eaae06
- first step to get rid of global variables from all files in inc/
...
- added new Class LetoDMS_DMS which represents the DMS, contains
all settings for the DMS and the database connection. A document
and a folder have a reference to the DMS
2010-11-12 22:47:41 +00:00
steinm
b5bc621318
- move all sources into trunk
2010-10-29 13:19:51 +00:00
