admin/raven
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Browse Source
This commit is contained in:
John Cardinal
2019-04-23 23:01:27 +00:00
parent e9e2d324b2
commit 82d4b9694c
2 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
server/AyaNova/biz/AyaType.cs
View File

@@ -42,6 +42,8 @@ namespace AyaNova.Biz
//AyaNova.Biz.BizRoles //AyaNova.Biz.BizRoles
//AyaNova.Biz.BizObjectNameFetcherDIRECT //AyaNova.Biz.BizObjectNameFetcherDIRECT
//and in the CLIENT in ayatype.js
} }

8
server/AyaNova/biz/BizRoles.cs
View File

@@ -15,14 +15,16 @@ namespace AyaNova.Biz
static BizRoles() static BizRoles()
{ {
//TODO: change this entire block to work off a fragment of JSON that can be shared with the Client side project as well
//Add all object roles here //Add all object roles here
//NOTE: do not need to add change roles to read roles, Authorized.cs takes care of that automatically //NOTE: do not need to add change roles to read roles, Authorized.cs takes care of that automatically
//by assuming if you can change you can read //by assuming if you can change you can read
//HOW THIS WORKS / WHATS EXPECTED //HOW THIS WORKS / WHATS EXPECTED
//CHANGE = CREATE, RETRIEVE, UPDATE, DELETE - Full rights //Change = CREATE, RETRIEVE, UPDATE, DELETE - Full rights
//EDITOWN = special subset of CHANGE: You can create and if it's one you created then you have rights to edit it or delete, but you can't edit ones others have created //EditOwn = special subset of CHANGE: You can create and if it's one you created then you have rights to edit it or delete, but you can't edit ones others have created
//READ = You can read *all* the fields of the record, but can't modify it. Change is automatically checked for so only add different roles from change //ReadFullRecord = You can read *all* the fields of the record, but can't modify it. Change is automatically checked for so only add different roles from change
//PICKLIST NOTE: this does not control getting a list of names for selection which is role independent because it's required for so much indirectly //PICKLIST NOTE: this does not control getting a list of names for selection which is role independent because it's required for so much indirectly
//DELETE = There is no specific delete right for now though it's checked for by routes in Authorized.cs in case we want to add it in future as a separate right from create. //DELETE = There is no specific delete right for now though it's checked for by routes in Authorized.cs in case we want to add it in future as a separate right from create.