Changeset 16080

Show
Ignore:
Timestamp:
04/15/08 08:53:22 (6 months ago)
Author:
rambo
Message:

use specific management privilege for controlling access to plugin, deny midgard:read by default to subscription objects

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • branches/MidCOM_2_8/midcom.helper.replicator/config/manifest.inc

    r15917 r16080  
    44'version' => '1.1.4', 
    55'state' => 'stable', 
    6 'privileges' => array(), 
     6'privileges' => array 
     7( 
     8    'manage' => MIDCOM_PRIVILEGE_DENY, 
     9), 
    710'class_definitions' => array 
    811( 

  • branches/MidCOM_2_8/midcom.helper.replicator/manager.php

    r14656 r16080  
    191191    function _handler_list($handler_id, $args, &$data) 
    192192    { 
    193         $_MIDCOM->auth->require_admin_user(); 
     193        $_MIDCOM->auth->require_user_do('midcom.helper.replicator:manage'); 
    194194 
    195195        $qb = midcom_helper_replicator_subscription_dba::new_query_builder(); 
    …… 
    263263    { 
    264264        $this->_subscription = new midcom_helper_replicator_subscription_dba($args[0]); 
    265         if (!$this->_subscription) 
     265        if (   !is_object($this->_subscription) 
     266            || !isset($this->_subscription->guid) 
     267            || empty($this->_subscription->guid)) 
    266268        { 
    267269            return false; 
    …… 
    341343    function _handler_create($handler_id, $args, &$data) 
    342344    { 
    343         $_MIDCOM->auth->require_admin_user(); 
     345        $_MIDCOM->auth->require_user_do('midcom.helper.replicator:manage'); 
    344346 
    345347        $this->_schema = $args[0]; 
    …… 
    406408    function _handler_object($handler_id, $args, &$data) 
    407409    { 
    408         $_MIDCOM->auth->require_admin_user(); 
     410        $_MIDCOM->auth->require_user_do('midcom.helper.replicator:manage'); 
    409411 
    410412        $bind_toolbar = true; 

  • branches/MidCOM_2_8/midcom.helper.replicator/subscription.php

    r14321 r16080  
    9797        return true; 
    9898    } 
     99 
     100    /** 
     101     * As default only admins can read subscriptions that do not have specific privileges granted. 
     102     */ 
     103    function get_class_magic_default_privileges() 
     104    { 
     105        $privileges = parent::get_class_magic_default_privileges(); 
     106        $privileges['EVERYONE']['midgard:read'] = MIDCOM_PRIVILEGE_DENY; 
     107        return $privileges; 
     108    } 
    99109} 
    100110?>