Hi, Raymond
The things you're pointing out were the subject of this task:
http://jira.nuxeo.org/browse/NXP-3331.
So "CanAskForPublishing" permission was included in "Read" permission in
order for a user which has "Read" persmission for a section to be able
to ask for publication in that section.
And also, if a user doesn't have "Read" persmission for a section, but
has "CanAskForPublishing" permission for it, she'll be able to ask for
publication even she doesn't have "Read" permissions.
C.
Raymond Bourges wrote:
Hi,
I have some tests with Nuxeo DM 5.2.
By default, a user is authorized to read "Sections".
As CanAskForPublishing permission is included in Read permission, any
user can request to publish!
I don't understand what is the usefulness of having ability to assign
CanAskForPublishing permission on sections as I must at least have the
Read permission for navigating in sections where I want to publish.
In my point of view, this seems better:
1) The code (getCanPublishToSection function) that displays (or not)
the "publish here" button is displayed if user has the
CanAskForPublishing permission OR write permission (and not just
CanAskForPublishing as now).
2) Read permission should not include the CanAskForPublishing permission.
What do you think about this?
Thanks.
_______________________________________________
ECM mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm
To unsubscribe, go to http://lists.nuxeo.com/mailman/options/ecm
_______________________________________________
ECM mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm
To unsubscribe, go to http://lists.nuxeo.com/mailman/options/ecm
