Authenticated user can see cases they are a provider for.

2022-01-20 14:48:53 +00:00
parent f39f4a331d
commit 7c3b007ff9
6 changed files with 4 additions and 21 deletions
--- a/modules/opencase_cases/src/OCCaseAccessControlHandler.php
+++ b/modules/opencase_cases/src/OCCaseAccessControlHandler.php
@ -32,7 +32,6 @@ class OCCaseAccessControlHandler extends EntityAccessControlHandler {
      case 'update':   // you can edit the case only if a) you can see it and b) you have the permission to edit cases.
        return AccessResult::allowedIf(
            $account->hasPermission('edit case entities')
-            && ($account->hasPermission('view published case entities') || CaseInvolvement::userIsInvolved($account, $entity))
        );
      case 'delete':   // you can delete the case only if a) you can see it and b) you have the permission to delete cases.
        return AccessResult::allowedIf(