oqapi/webgui
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Make tokens and the EMS obey the token's view permissions. Fixes bug #11583

Browse source
This commit is contained in:
Colin Kuskie 2010-05-24 09:23:19 -07:00
parent ac3255e0c6
commit 16927cd916
3 changed files with 4 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
lib/WebGUI/Asset/Wobject/EventManagementSystem.pm
View file

@ -1957,7 +1957,8 @@ sub www_getTokensAsJson {
my ($db, $form) = $session->quick(qw(db form));
my %results = ();
$results{records} = []; ##Initialize to an empty array
foreach my $token (@{$self->getTokens}) {
TOKEN: foreach my $token (@{$self->getTokens}) {
next TOKEN unless $token->canView;
push(@{$results{records}}, {
title => $token->getTitle,
description => $token->get('description'),