Bugs item #2353606, was opened at 2008-11-27 14:19
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=119984&aid=2353606&group_id=19984

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Authorisation
Group: 1.5.1
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: george (gmh04)
Assigned to: Nobody/Anonymous (nobody)
Summary: Non-admin user and admin menu options (1.5.1 XMUI only)

Initial Comment:
I had a problem with non admin users having access to admin and context 
menu options (when submitting a new item) in DSpace 1.5.1 XML.  Although 
access to these page is prevented, we don't want our users seeing the 
options.

I had a look around and noticed that org.dspace.browse.BrowseConsumer 
was being fired when a new item was created.  In its constructor 
context.setIgnoreAuthorization(true) was being called but there was no 
corresponding context.setIgnoreAuthorization(false).

In the meantime I have added a call to 
context.setIgnoreAuthorization(false) at the end the indexItem method.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=119984&aid=2353606&group_id=19984

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Dspace-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspace-devel

Reply via email to