Changeset 478

Timestamp:

10/04/09 04:37:41 (15 years ago)

Author:

nanardon

Message:

• '*' attribute in acl do not include CREATE and DELETE action

File:

• LATMOS-Accounts/lib/LATMOS/Accounts/Acls.pm (modified) (2 diffs)

LATMOS-Accounts/lib/LATMOS/Accounts/Acls.pm

@@ -33 +33 @@
 enclose into bracket, either a '*' to match any attribute.
 
-Special keyword 'CREATE' and 'DELETE' can be used to allow or deny object
+Special keyword C<CREATE> and C<DELETE> can be used to allow or deny object
 creation and deletion. In this case USER in form C<$...> and read permission
-have no effect (see below).
+have no effect (see below). C<*> do not include C<CREATE> and C<DELETE> action.
 
 =item USER can be
@@ -191 +191 @@
         return
     }
-    grep { $_ eq '*' || $_ eq $attr } @{$self->{attr}} or return;
+    grep { ($_ !~ /^(CREATE|DELETE)$/ && $_ eq '*') || $_ eq $attr } @{$self->{attr}} or return;
 
     foreach my $u (@{ $self->{users} }) {