From: Sylvie G. <sgr...@gm...> - 2010-09-15 11:11:46
|
Marc would like to do this change but I am not sure. What do you think? Actually If a user has no tiki_p_list_objects or tiki_p_admin_objects he will not be able to access tiki-list_objects.php or tiki_admin_objects.php even if he has a special perm on one of the object. Why is it done like this: - probably historical reason because perms where not so strong in the old days - easy to have WYSIWYG buttons - easy programming How can we achieve the same result now - We can give global tiki_p_list_objects and tiki_p_admin_objects and limit the perms on each object - a little fastidious. Why it will cost to fix - change all the perms check in tiki-list_objects.php and tiki_admin_objects.php - change all the perms check for each button list_objects and admin_objects It is a lot of places We probably need a cache for the buttons because it will be time consuming to check . And if we have a cache for the buttons we can use it in tiki-view_objects.php and tiki-admin_objects.php What do you think? Thx sylvie |