composer/iTop
6
0
Fork 0
mirror of https://github.com/Combodo/iTop.git synced 2026-02-13 07:24:13 +01:00
Code Issues Packages Projects Releases Wiki Activity

995 - Searching in OQL, URs with a particular request template field value

Browse Source 
added AllowDelete in order to bypass the user's rights
This commit is contained in:
bruno DA SILVA
2019-12-10 16:59:44 +01:00
parent 374946505a
commit ea708e1e05
1 changed files with 24 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
application/cmdbabstract.class.inc.php
View File

@@ -67,6 +67,10 @@ abstract class cmdbAbstractObject extends CMDBObject implements iDisplay
* @var bool
*/
protected $bAllowWrite;
/**
* @var bool
*/
protected $bAllowDelete;
/**
* Constructor from a row of data (as a hash 'attcode' => value)
@@ -82,6 +86,7 @@ abstract class cmdbAbstractObject extends CMDBObject implements iDisplay
{
parent::__construct($aRow, $sClassAlias, $aAttToLoad, $aExtendedDataSpec);
$this->bAllowWrite = false;
$this->bAllowDelete = false;
}
/**
@@ -4078,6 +4083,16 @@ EOF
$this->bAllowWrite = $bAllow;
}
/**
* Bypass the check of the user rights when deleting this object
*
* @param bool $bAllow True to bypass the checks, false to restore the default behavior
*/
public function AllowDelete($bAllow = true)
{
$this->bAllowDelete = $bAllow;
}
/**
* @inheritdoc
* @throws \ArchivedObjectException
@@ -4150,13 +4165,16 @@ EOF
// User rights
//
$bDeleteAllowed = UserRights::IsActionAllowed(get_class($this), UR_ACTION_DELETE,
DBObjectSet::FromObject($this));
if (!$bDeleteAllowed)
if (! $this->bAllowDelete)
{
// Security issue
$this->m_bSecurityIssue = true;
$this->m_aDeleteIssues[] = Dict::S('UI:Delete:NotAllowedToDelete');
$bDeleteAllowed = UserRights::IsActionAllowed(get_class($this), UR_ACTION_DELETE, DBObjectSet::FromObject($this));
if (!$bDeleteAllowed)
{
// Security issue
$this->m_bSecurityIssue = true;
$this->m_aDeleteIssues[] = Dict::S('UI:Delete:NotAllowedToDelete');
}
}
}