autonomic-cooperative/opencase
Archived
0
0
Fork 0
Code Issues 43 Pull Requests Releases Wiki Activity

Removed the "view own cases" permission

Browse Source 
Now everyone sees cases they are involved in, they don't need a special perm.
This commit is contained in:
naomi
2018-07-09 20:26:11 +02:00
parent 910350699d
commit a267e222b8
4 changed files with 8 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
modules/opencase_entities/src/OCCaseAccessControlHandler.php
View File

@ -30,8 +30,10 @@ class OCCaseAccessControlHandler extends EntityAccessControlHandler {
|| CaseInvolvement::userIsInvolved($account, $entity)
);
case 'update':
return AccessResult::allowedIfHasPermission($account, 'edit case entities');
return AccessResult::allowedIf(
$account->hasPermission('edit published case entities')
|| CaseInvolvement::userIsInvolved($account, $entity)
);
case 'delete':
return AccessResult::allowedIfHasPermission($account, 'delete case entities');
}