From 47573a195025780b69fa197c49186f3bc7e41272 Mon Sep 17 00:00:00 2001 From: Jocelyn Fiat Date: Thu, 16 Jul 2015 20:03:07 +0200 Subject: [PATCH] Added permissions "$action any node" , "$action own node" for now. --- modules/node/cms_node_api.e | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/modules/node/cms_node_api.e b/modules/node/cms_node_api.e index 7b45350..877d0c6 100644 --- a/modules/node/cms_node_api.e +++ b/modules/node/cms_node_api.e @@ -299,6 +299,16 @@ feature -- Permission Scope: Node Result := cms_api.user_has_permission (a_user, a_action + " own " + l_type_name) end end + fixme ("when admin back end is ready, remove this, as too general.") -- FIXME + if not Result then + Result := cms_api.user_has_permission (a_user, a_action + " any node") + if not Result and a_user /= Void then + if is_author_of_node (a_user, a_node) then + Result := cms_api.user_has_permission (a_user, a_action + " own node") + end + end + + end end feature -- Change: Node