Changeset 1091 for trunk/LATMOS-Accounts-Web/root

Timestamp:

08/03/12 09:07:20 (12 years ago)

Author:

nanardon

Message:

Add ACL support to datarequest

If the forms contains a list of validators and user match it, permissions are
granted,
If global acl config grant '@VALIDATE' over 'request' object and user match it,
permissions are granted,
and if nothing match, permissions are checked over the pointed object.

Location:

trunk/LATMOS-Accounts-Web/root/html/admin/requests

Files:

• default.tt (modified) (1 diff)
• index.tt (modified) (1 diff)

trunk/LATMOS-Accounts-Web/root/html/admin/requests/default.tt

@@ -49 +49 @@
 
 [% IF loop.last %]
+[% IF request.check_acl %]
 <tr><td></td><td></td><td>
     <input name="_cancel" type="submit" value="Refuser">
     <input name="_validate" type="submit" value="Procéder">
 </td></tr>
+[% END %]
 </table>
 </form>

trunk/LATMOS-Accounts-Web/root/html/admin/requests/index.tt

@@ -19 +19 @@
 <tr>
 <td>
+[% IF req.check_acl %]
+OK
+[% ELSE %]
+perm denied
+[% END %]
 <a href=[% c.uri_for(id) %]>
 [% req.accreq.get_attributes('description') || req.accreq.id | truncate(20) | html %]