This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "Evergreen ILS".
The branch, master has been updated
via 4d1cb47c383e1686f4b2a55c1f3e906db1d8c4a4 (commit)
from 0bff4ed1efbcd6dedd8398b5080ec0dec2b2cf7c (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit 4d1cb47c383e1686f4b2a55c1f3e906db1d8c4a4
Author: Galen Charlton <gmc at equinoxinitiative.org>
Date: Thu Feb 13 16:49:46 2020 -0500
LP#1863386: link ADMIN_CAROUSEL permission to appropriate OU context
This patch restricts prcrud retrieval and modification of templates
to users who have ADMIN_CAROUSEL in the relevant carousel owner OU
rather than requiring global_required.
To test
-------
[1] Apply the patch.
[2] Ensure that a user with ADMIN_CAROUSEL privileges at a depth
lower than "Consortium" can only view and edit carousel
definitions at OUs applicable to their working libraries.
Signed-off-by: Galen Charlton <gmc at equinoxinitiative.org>
Signed-off-by: Mike Rylander <mrylander at gmail.com>
Signed-off-by: Jennifer Weston <jennifer.weston at equinoxinitiative.org>
diff --git a/Open-ILS/examples/fm_IDL.xml b/Open-ILS/examples/fm_IDL.xml
index b32557a9a5..9d537631fe 100644
--- a/Open-ILS/examples/fm_IDL.xml
+++ b/Open-ILS/examples/fm_IDL.xml
@@ -13020,10 +13020,10 @@ SELECT usr,
</links>
<permacrud xmlns="http://open-ils.org/spec/opensrf/IDL/permacrud/v1">
<actions>
- <create permission="ADMIN_CAROUSEL" global_required="true"/>
- <retrieve/>
- <update permission="ADMIN_CAROUSEL" global_required="true"/>
- <delete permission="ADMIN_CAROUSEL" global_required="true"/>
+ <create permission="ADMIN_CAROUSEL" context_field="owner"/>
+ <retrieve permission="ADMIN_CAROUSEL" context_field="owner"/>
+ <update permission="ADMIN_CAROUSEL" context_field="owner"/>
+ <delete permission="ADMIN_CAROUSEL" context_field="owner"/>
</actions>
</permacrud>
</class>
@@ -13046,10 +13046,18 @@ SELECT usr,
</links>
<permacrud xmlns="http://open-ils.org/spec/opensrf/IDL/permacrud/v1">
<actions>
- <create permission="ADMIN_CAROUSEL" global_required="true"/>
- <retrieve/>
- <update permission="ADMIN_CAROUSEL" global_required="true"/>
- <delete permission="ADMIN_CAROUSEL" global_required="true"/>
+ <create permission="ADMIN_CAROUSEL">
+ <context link="carousel" field="owner" />
+ </create>
+ <retrieve permission="ADMIN_CAROUSEL">
+ <context link="carousel" field="owner" />
+ </retrieve>
+ <update permission="ADMIN_CAROUSEL">
+ <context link="carousel" field="owner" />
+ </update>
+ <delete permission="ADMIN_CAROUSEL">
+ <context link="carousel" field="owner" />
+ </delete>
</actions>
</permacrud>
</class>
-----------------------------------------------------------------------
Summary of changes:
Open-ILS/examples/fm_IDL.xml | 24 ++++++++++++++++--------
1 file changed, 16 insertions(+), 8 deletions(-)
hooks/post-receive
--
Evergreen ILS