prepare finer-grained access control for work items
This commit is contained in:
parent
1867c01ae3
commit
efea782af2
1 changed files with 3 additions and 0 deletions
|
@ -168,7 +168,10 @@ class WorkItemDetails(TrackDetails):
|
||||||
|
|
||||||
@Lazy
|
@Lazy
|
||||||
def allowedToEditWorkItem(self):
|
def allowedToEditWorkItem(self):
|
||||||
|
# if not canAccessObject(self.object.task):
|
||||||
|
# return False
|
||||||
if checkPermission('loops.ManageSite', self.object):
|
if checkPermission('loops.ManageSite', self.object):
|
||||||
|
# or hasRole('loops.Master', self.object):
|
||||||
return True
|
return True
|
||||||
if self.track.data.get('creator') == self.personId:
|
if self.track.data.get('creator') == self.personId:
|
||||||
return True
|
return True
|
||||||
|
|
Loading…
Add table
Reference in a new issue