Le 01/09/2009 02:58, Ryan Foster a écrit :
>> Yes and certainly with a "new" CommonDBRelation type
> Thanks for mentioning that.
>> (even if right
>> check should be carrefully analyzed in this case)
>>
> Could you explain this?
CommonDBRelation provide a generic can/check method for right.
Right to add/delete a relation beteween 2 objects is :
The "current" logged user must have :
- right to read both objetcs
- right to write one
- entity compatibility (both in the same entity or one above other, if
it is "recursive")
In this case, you don't need "read" right on the user, but the user, for
the relation, (not the "current" logged one) must have acces to the
entity of the ticket.
+
>
> _______________________________________________
> Glpi-dev mailing list
> Glpi-dev@gna.org
> https://mail.gna.org/listinfo/glpi-dev
>
_______________________________________________
Glpi-dev mailing list
Glpi-dev@gna.org
https://mail.gna.org/listinfo/glpi-dev
