composer/iTop
6
0
Fork 0
mirror of https://github.com/Combodo/iTop.git synced 2026-05-18 06:48:50 +02:00
Code Issues Packages Projects Releases Wiki Activity

N°7478 - Users (except admins) are not allowed to manage their own allowed org list

Browse Source
This commit is contained in:
Eric Espie
2024-05-27 14:55:37 +02:00
parent fc428eeb2b
commit 11502d2e92
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
core/userrights.class.inc.php
View File

@@ -2,6 +2,7 @@
use Combodo\iTop\Application\Helper\Session;
use Combodo\iTop\Application\WebPage\WebPage;
use Combodo\iTop\Service\Events\EventData;
define('UR_ALLOWED_NO', 0);
define('UR_ALLOWED_YES', 1);
@@ -261,11 +262,23 @@ abstract class User extends cmdbAbstractObject
MetaModel::Init_SetZListItems('default_search', array('login', 'contactid', 'status', 'org_id')); // Default criteria of the search banner
}
protected function RegisterEventListeners()
{
if ($this->IsCurrentUser() && !UserRights::IsAdministrator()) {
$this->RegisterCRUDListener(EVENT_DB_SET_ATTRIBUTES_FLAGS, 'SetAllowedOrgListReadOnly');
}
}
abstract public function CheckCredentials($sPassword);
abstract public function TrustWebServerContext();
abstract public function CanChangePassword();
abstract public function ChangePassword($sOldPassword, $sNewPassword);
protected function SetAllowedOrgListReadOnly(EventData $oEventData)
{
$this->AddAttributeFlags('allowed_org_list', OPT_ATT_READONLY);
}
/*
* Compute a name in best effort mode
*