composer/iTop
6
0
Fork 0
mirror of https://github.com/Combodo/iTop.git synced 2026-04-24 02:58:43 +02:00
Code Issues Packages Projects Releases Wiki Activity

Improved user rights management: SELECT filtered on objects authorized for the current user (not yet fully implemented)

Browse Source 
SVN:trunk[681]
This commit is contained in:
Romain Quetiez
2010-08-19 13:08:42 +00:00
parent 2387176142
commit b555f104df
12 changed files with 666 additions and 50 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
core/metamodel.class.php
View File

@@ -1509,6 +1509,27 @@ abstract class MetaModel
public static function MakeSelectQuery(DBObjectSearch $oFilter, $aOrderBy = array(), $aArgs = array())
{
// Hide objects that are not visible to the current user
//
if (!$oFilter->IsAllDataAllowed())
{
$oVisibleObjects = UserRights::GetSelectFilter($oFilter->GetClass());
if ($oVisibleObjects === false)
{
// Make sure this is a valid search object, saying NO for all
$oVisibleObjects = DBObjectSearch::FromEmptySet($oFilter->GetClass());
}
if (is_object($oVisibleObjects))
{
$oFilter->MergeWith($oVisibleObjects);
}
else
{
// should be true at this point, meaning that no additional filtering
// is required
}
}
// Query caching
//
$bQueryCacheEnabled = true;