Repository: rave
Updated Branches:
  refs/heads/master acf2cf696 -> 096dcf196


RAVE-1273 | Cloning should only require read access to a page


Project: http://git-wip-us.apache.org/repos/asf/rave/repo
Commit: http://git-wip-us.apache.org/repos/asf/rave/commit/126f1fe4
Tree: http://git-wip-us.apache.org/repos/asf/rave/tree/126f1fe4
Diff: http://git-wip-us.apache.org/repos/asf/rave/diff/126f1fe4

Branch: refs/heads/master
Commit: 126f1fe4154e06ad29024346114478363674e697
Parents: aab1719
Author: Stanton Sievers <[email protected]>
Authored: Mon Aug 11 11:33:37 2014 -0400
Committer: Stanton Sievers <[email protected]>
Committed: Mon Aug 11 11:33:37 2014 -0400

----------------------------------------------------------------------
 .../main/java/org/apache/rave/portal/service/PageService.java    | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/rave/blob/126f1fe4/rave-components/rave-core/src/main/java/org/apache/rave/portal/service/PageService.java
----------------------------------------------------------------------
diff --git 
a/rave-components/rave-core/src/main/java/org/apache/rave/portal/service/PageService.java
 
b/rave-components/rave-core/src/main/java/org/apache/rave/portal/service/PageService.java
index fadb17b..1f47c72 100644
--- 
a/rave-components/rave-core/src/main/java/org/apache/rave/portal/service/PageService.java
+++ 
b/rave-components/rave-core/src/main/java/org/apache/rave/portal/service/PageService.java
@@ -299,7 +299,7 @@ public interface PageService {
      * @param pageName = name of the page
      * @return true or false whether the user was added
      */
-    @PreAuthorize("hasPermission(#pageId, 'org.apache.rave.model.Page', 
'update')")
+    @PreAuthorize("hasPermission(#pageId, 'org.apache.rave.model.Page', 
'read')")
     Boolean clonePageForUser(String pageId, String userId, String pageName);
 
     /**
@@ -356,4 +356,4 @@ public interface PageService {
     @PreAuthorize("hasPermission(#pageId, 'org.apache.rave.model.Page', 
'update')")
     Boolean updatePageEditingStatus(String pageId, String userId, boolean 
isEditor);
 
-}
\ No newline at end of file
+}

Reply via email to