oqapi/webgui
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fixed: Only users in 'Content Managers' can create shortcuts

Browse source
This commit is contained in:
Graham Knop 2009-08-11 16:31:33 +00:00
parent 401a1cff1c
commit 2ab07179bd
2 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
docs/changelog/7.x.x.txt
View file

@ -1,4 +1,5 @@
7.7.17 7.7.17
- fixed: Only users in 'Content Managers' can create shortcuts
- fixed #10748: In-store credit not reported correctly in email - fixed #10748: In-store credit not reported correctly in email
- fixed #10746: SQL queriy is improper for MySQL compliant query - fixed #10746: SQL queriy is improper for MySQL compliant query
- fixed: Existing ThingyRecords are broken after upgrade - fixed: Existing ThingyRecords are broken after upgrade

3
lib/WebGUI/AssetClipboard.pm
View file

@ -294,7 +294,8 @@ sub www_copyList {
sub www_createShortcut { sub www_createShortcut {
my $self = shift; my $self = shift;
my $session = $self->session; my $session = $self->session;
return $session->privilege->insufficient() unless ($self->session->user->isInGroup(4)); return $session->privilege->insufficient()
if !$session->user->isInGroup(12) || !$self->canView;
my $isOnDashboard = $self->getParent->isa('WebGUI::Asset::Wobject::Dashboard'); my $isOnDashboard = $self->getParent->isa('WebGUI::Asset::Wobject::Dashboard');
my $shortcutParent = $isOnDashboard? $self->getParent : WebGUI::Asset->getImportNode($session); my $shortcutParent = $isOnDashboard? $self->getParent : WebGUI::Asset->getImportNode($session);