This commit is contained in:
@@ -5,7 +5,8 @@
|
||||
## IMMEDIATE ITEMS
|
||||
|
||||
|
||||
|
||||
todo: bugbug BizAdminFull can't get widgetlist but is allowed to edit a widget, datalist is using Bizroles.getrolset to see if user has read full rights expecting change will supersed
|
||||
however GET route is using Authorized.HasReadFullRole which does take into consideration change superseding so need to fix datalist stuff
|
||||
|
||||
todo: move to client work then back here to document after
|
||||
todo: api / server landing page is shitty on a mobile
|
||||
|
||||
@@ -9,9 +9,9 @@ namespace AyaNova.DataList
|
||||
public TestUserDataList()
|
||||
{
|
||||
DefaultListObjectType = AyaType.User;
|
||||
|
||||
SQLFrom = "from auser";
|
||||
AllowedRoles = BizRoles.GetRoleSet(DefaultListObjectType).ReadFullRecord;
|
||||
var RoleSet = BizRoles.GetRoleSet(DefaultListObjectType);
|
||||
AllowedRoles = RoleSet.ReadFullRecord | RoleSet.Change;
|
||||
|
||||
//Default ListView
|
||||
dynamic dlistView = new JArray();
|
||||
|
||||
@@ -7,10 +7,10 @@ namespace AyaNova.DataList
|
||||
{
|
||||
public TestWidgetDataList()
|
||||
{
|
||||
|
||||
DefaultListObjectType = AyaType.Widget;
|
||||
SQLFrom = "from awidget left outer join auser on (awidget.userid=auser.id)";
|
||||
AllowedRoles = BizRoles.GetRoleSet(DefaultListObjectType).ReadFullRecord;
|
||||
var RoleSet = BizRoles.GetRoleSet(DefaultListObjectType);
|
||||
AllowedRoles = RoleSet.ReadFullRecord | RoleSet.Change;
|
||||
|
||||
//Default ListView
|
||||
dynamic dlistView = new JArray();
|
||||
|
||||
@@ -16,10 +16,11 @@ namespace AyaNova.DataList
|
||||
|
||||
public TestWidgetUserEmailDataList()
|
||||
{
|
||||
|
||||
SQLFrom = "from awidget left outer join auser on (awidget.userid=auser.id) left outer join auseroptions on (auser.id=auseroptions.userid)";
|
||||
AllowedRoles = BizRoles.GetRoleSet(DefaultListObjectType).ReadFullRecord;
|
||||
DefaultListObjectType = AyaType.Widget;
|
||||
SQLFrom = "from awidget left outer join auser on (awidget.userid=auser.id) left outer join auseroptions on (auser.id=auseroptions.userid)";
|
||||
var RoleSet = BizRoles.GetRoleSet(DefaultListObjectType);
|
||||
AllowedRoles = RoleSet.ReadFullRecord | RoleSet.Change;
|
||||
|
||||
//Default ListView
|
||||
dynamic dlistView = new JArray();
|
||||
|
||||
|
||||
@@ -235,6 +235,8 @@ namespace AyaNova.Biz
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
}//end of class
|
||||
|
||||
|
||||
Reference in New Issue
Block a user