Do not let portal users configure their lists... not bullet proof from the security point of view, but better than opening it wide.

SVN:trunk[2200]
This commit is contained in:
Denis Flaven
2012-09-21 16:57:53 +00:00
parent 2eddb57cbd
commit 45bfee7ef0

View File

@@ -71,7 +71,14 @@ class DataTable
}
$this->oSet->SetOrderBy($oCustomSettings->GetSortOrder());
return $this->GetAsHTML($oPage, $oCustomSettings->iDefaultPageSize, $oCustomSettings->iDefaultPageSize, 0, $oCustomSettings->aColumns, $bActionsMenu, true, $sSelectMode, $bViewLink, $aExtraParams);
$bToolkitMenu = true;
if (UserRights::IsPortalUser())
{
// Portal users have a limited access to data, for now they can only see what's configured for them
$bToolkitMenu = false;
}
return $this->GetAsHTML($oPage, $oCustomSettings->iDefaultPageSize, $oCustomSettings->iDefaultPageSize, 0, $oCustomSettings->aColumns, $bActionsMenu, $bToolkitMenu, $sSelectMode, $bViewLink, $aExtraParams);
}
public function GetAsHTML(WebPage $oPage, $iPageSize, $iDefaultPageSize, $iPageIndex, $aColumns, $bActionsMenu, $bToolkitMenu, $sSelectMode, $bViewLink, $aExtraParams)