admin/raven-client
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Browse Source
This commit is contained in:
John Cardinal
2019-05-06 23:55:44 +00:00
parent 49d6398684
commit b32d0a7544
1 changed files with 31 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
ayanova/devdocs/todo.txt
View File

@@ -6,7 +6,9 @@ TODO:
- DONE Delete works but triggers navigation guard when record has been edited and is dirty and it attempts to navigate away after deletion automatically
- Dirty delete should clear dirty after successful delete then move away or whatever
- DONE About form when you go to log doesn't update the title bar showing log, still seems to say about ayanova
- TechFull user should be edit own but can't navigate to inventory form to test when not going directly from a link ?!
- EDIT_OWN: HOW TO HANDLE PROPERLY??
- TechFull user should be edit own but can't navigate to inventory form to test when not going directly from a link ?!
- Same issue with BizAdminLimited and read only, can't go to inventory at all to view list
- rights must be set for only full access to even view the inventory page.
- RETEST RIGHTS after this because could not test with this issue
@@ -53,7 +55,34 @@ TODO:
- Issue is that this means every possible way of viewing widgets for example needs to have exceptions for people of limited roles who are only supposed to see their own widgets that they created.
- Does this mean every list fetcher needs to check rights first then add an additional filter if they are only allowed to editown restricted to owner=currentuserid?
- Would that solve this problem?
- Is this only about workorders or other types of records??
- Maybe it's as simple as adding an automatic filter to the getmany routes in bizobjects that add if editown and filters on ownerid=currentuserID
- Plan calls for limited users to be able to create a client for example to fill out a workorder even if they are a subcontractor with limited client rights but this seems bogus, the requested feature is probably more to do with they can fill it out but not create major new objects, only select from them.
- POTENTIAL SOLUTIONS
- GetMany list object checks if only right to that list is editown and then adds a filter automatically to only show ownerID=currentuserID
- Client checks not only full and limited but also edit own and if there is any editown then allows to continue
- Potential issue here: do we show all of inventory if user only has editown rights to widgets and not parts (for hypothetical example)
- Re-think the editown system, what exactly is it solving and is there another way to accomplish that?
- For example if it's only about workorders then
- Can we stick to the Change and Modify rights and just have the ability to assign workorders to lesser rights users user by user?
-
- Does edit own even work?
- For example, this means that a user needs to OWN a workorder to be able to edit it if they are subcontractor, that's BS
- The roles source docs say the user must appear on the workorder to see it.
- Maybe it's more of a right thing that has nothing to do with editown and more to do with relevancy, so...
- A service workorder is relevant to a non roled user if they appear on it even if they are a subcontractor
- However they only see the bare minimum they need and nothing else.
- Limited rights user can only select existing items to fill out a workorder? Not create new?
- TODO TO RESOLVE THIS:
- READ: Go through plans and docs and look for roles related stuff and also subcontractor stuff to get a feel for waht needs to be supported first before getting any deeper into this
- Maybe I don't have the full idea of what this is about
- REQUEST: What is actually being requested by users to fulfil this feature that is different from v7?
- SCOPE: Figure out what objects this would even affect, maybe it's only the workorder
- TTM: We don't want to hold up all of AyaNova 8 over this, the default mode is to do what was there before in v7, is this worth holding everythign up?
- Can it be a future feature or does it need to be in v8? Probably needs to be in v8
- About page - should show currently logged in user name, doesn't actually show anywhere right now