Author: david
Date: Thu Oct  1 16:35:43 2009
New Revision: 3630

Log:
Use ACL for visibility of physical storage objects in context menu.

Modified:
   
trunk/apps/qubit/modules/informationobject/actions/contextMenuComponent.class.php

Modified: 
trunk/apps/qubit/modules/informationobject/actions/contextMenuComponent.class.php
==============================================================================
--- 
trunk/apps/qubit/modules/informationobject/actions/contextMenuComponent.class.php
   Thu Oct  1 15:28:30 2009        (r3629)
+++ 
trunk/apps/qubit/modules/informationobject/actions/contextMenuComponent.class.php
   Thu Oct  1 16:35:43 2009        (r3630)
@@ -34,9 +34,6 @@
     $this->informationObject = $request->getAttribute('informationObject');
     $this->multiRepository = (sfConfig::get('app_multi_repository') == 0) ? 
false : true;
 
-    //determine if user has edit priviliges
-    $this->editCredentials = 
(SecurityPriviliges::editCredentials($this->getUser(), 'informationObject')) ? 
true : false;
-
     // Get info object tree
     $this->informationObjects = null;
 
@@ -118,7 +115,7 @@
 
     // Get physical storage locations (only if user has edit privileges)
     $this->physicalObjects = null;
-    if ($this->editCredentials == true)
+    if (QubitAcl::check($this->informationObject, QubitAclAction::UPDATE_ID))
     {
       $physicalObjects = array();
       $childInformationObjects = 
$this->informationObject->getDescendants()->andSelf();

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Qubit Toolkit Commits" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.ca/group/qubit-commits?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to