Hi

I had a problem with non admin users having access to admin and context 
menu options (when submitting a new item) in DSpace 1.5.1 XML.  Although 
access to these page is prevented, we don't want our users seeing the 
options.

I had a look around and noticed that org.dspace.browse.BrowseConsumer 
was being fired when a new item was created.  In its constructor 
context.setIgnoreAuthorization(true) was being called but there was no 
corresponding context.setIgnoreAuthorization(false).

In the meantime I have added a call to 
context.setIgnoreAuthorization(false) at the end the indexItem method.

George

-- 
The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.


-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
DSpace-tech mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspace-tech

Reply via email to