Bugs item #2353606, was opened at 2008-11-27 07:19
Message generated for change (Settings changed) made by tdonohue
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=119984&aid=2353606&group_id=19984

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Authorisation
Group: 1.5.1
>Status: Closed
>Resolution: Out of Date
Priority: 5
Private: No
Submitted By: george (gmh04)
Assigned to: Nobody/Anonymous (nobody)
Summary: Non-admin user and admin menu options (1.5.1 XMUI only)

Initial Comment:
I had a problem with non admin users having access to admin and context 
menu options (when submitting a new item) in DSpace 1.5.1 XML.  Although 
access to these page is prevented, we don't want our users seeing the 
options.

I had a look around and noticed that org.dspace.browse.BrowseConsumer 
was being fired when a new item was created.  In its constructor 
context.setIgnoreAuthorization(true) was being called but there was no 
corresponding context.setIgnoreAuthorization(false).

In the meantime I have added a call to 
context.setIgnoreAuthorization(false) at the end the indexItem method.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=119984&aid=2353606&group_id=19984

------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate 
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
lucky parental unit.  See the prize list and enter to win: 
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
Dspace-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspace-devel

Reply via email to