On Mon, Jul 11, 2011 at 12:18 PM, Ferenc Kovacs <tyr...@gmail.com> wrote:
> On Mon, Jul 11, 2011 at 12:07 PM, Hannes Magnusson
> <hannes.magnus...@gmail.com> wrote:
>> On Mon, Jul 11, 2011 at 12:03, Hannes Magnusson
>> <hannes.magnus...@gmail.com> wrote:
>>> It is very hard to detect which "php group" a person belongs to, our
>>> karma system doesn't work like that.
>>>
>>> We can easily detect if an account is an php.net SVN account though.
>>> And the wiki can tell you if a person has write access to that specific 
>>> page.
>>>
>>> Most external users have assigned "write" groups, "qa", "rfc", "web".
>>> These are the people who have requested access to these areas.
>>>
>>> I was under the impression the vote plugin respected the write
>>> permission acl to that page, so a user would need to have write karma
>>> to that namespace to be able to vote.
>>> Does it have no builtin functionality like that?
>>
>> Answering my own question; No, it doesn't.
>> http://www.dokuwiki.org/plugin:doodle2#authentication
>>
>> -Hannes
>>
>
> I checked the source, if the permissions are set correctly, then the
> required code change is minimal:
> in the php-wiki/dokuwiki/lib/plugins/doodle/syntax.php file we have to
> modify the render and castVote methods to check
> $this->isAllowedToEditEntry($fullname) and thats it.
>
>
> --
> Ferenc Kovács
> @Tyr43l - http://tyrael.hu
>

of course the explicit group checking would be better, because
currently we have votes under rfc namespace where some users have
write access as they proposed/wanted to propose some rfc but they
shouldn't .

-- 
Ferenc Kovács
@Tyr43l - http://tyrael.hu

--
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to