This commit is contained in:
@@ -5,7 +5,8 @@
|
|||||||
## IMMEDIATE ITEMS
|
## IMMEDIATE ITEMS
|
||||||
|
|
||||||
|
|
||||||
|
todo: bugbug BizAdminFull can't get widgetlist but is allowed to edit a widget, datalist is using Bizroles.getrolset to see if user has read full rights expecting change will supersed
|
||||||
|
however GET route is using Authorized.HasReadFullRole which does take into consideration change superseding so need to fix datalist stuff
|
||||||
|
|
||||||
todo: move to client work then back here to document after
|
todo: move to client work then back here to document after
|
||||||
todo: api / server landing page is shitty on a mobile
|
todo: api / server landing page is shitty on a mobile
|
||||||
|
|||||||
@@ -9,9 +9,9 @@ namespace AyaNova.DataList
|
|||||||
public TestUserDataList()
|
public TestUserDataList()
|
||||||
{
|
{
|
||||||
DefaultListObjectType = AyaType.User;
|
DefaultListObjectType = AyaType.User;
|
||||||
|
|
||||||
SQLFrom = "from auser";
|
SQLFrom = "from auser";
|
||||||
AllowedRoles = BizRoles.GetRoleSet(DefaultListObjectType).ReadFullRecord;
|
var RoleSet = BizRoles.GetRoleSet(DefaultListObjectType);
|
||||||
|
AllowedRoles = RoleSet.ReadFullRecord | RoleSet.Change;
|
||||||
|
|
||||||
//Default ListView
|
//Default ListView
|
||||||
dynamic dlistView = new JArray();
|
dynamic dlistView = new JArray();
|
||||||
|
|||||||
@@ -7,10 +7,10 @@ namespace AyaNova.DataList
|
|||||||
{
|
{
|
||||||
public TestWidgetDataList()
|
public TestWidgetDataList()
|
||||||
{
|
{
|
||||||
|
|
||||||
DefaultListObjectType = AyaType.Widget;
|
DefaultListObjectType = AyaType.Widget;
|
||||||
SQLFrom = "from awidget left outer join auser on (awidget.userid=auser.id)";
|
SQLFrom = "from awidget left outer join auser on (awidget.userid=auser.id)";
|
||||||
AllowedRoles = BizRoles.GetRoleSet(DefaultListObjectType).ReadFullRecord;
|
var RoleSet = BizRoles.GetRoleSet(DefaultListObjectType);
|
||||||
|
AllowedRoles = RoleSet.ReadFullRecord | RoleSet.Change;
|
||||||
|
|
||||||
//Default ListView
|
//Default ListView
|
||||||
dynamic dlistView = new JArray();
|
dynamic dlistView = new JArray();
|
||||||
|
|||||||
@@ -16,10 +16,11 @@ namespace AyaNova.DataList
|
|||||||
|
|
||||||
public TestWidgetUserEmailDataList()
|
public TestWidgetUserEmailDataList()
|
||||||
{
|
{
|
||||||
|
|
||||||
SQLFrom = "from awidget left outer join auser on (awidget.userid=auser.id) left outer join auseroptions on (auser.id=auseroptions.userid)";
|
|
||||||
AllowedRoles = BizRoles.GetRoleSet(DefaultListObjectType).ReadFullRecord;
|
|
||||||
DefaultListObjectType = AyaType.Widget;
|
DefaultListObjectType = AyaType.Widget;
|
||||||
|
SQLFrom = "from awidget left outer join auser on (awidget.userid=auser.id) left outer join auseroptions on (auser.id=auseroptions.userid)";
|
||||||
|
var RoleSet = BizRoles.GetRoleSet(DefaultListObjectType);
|
||||||
|
AllowedRoles = RoleSet.ReadFullRecord | RoleSet.Change;
|
||||||
|
|
||||||
//Default ListView
|
//Default ListView
|
||||||
dynamic dlistView = new JArray();
|
dynamic dlistView = new JArray();
|
||||||
|
|
||||||
|
|||||||
@@ -236,6 +236,8 @@ namespace AyaNova.Biz
|
|||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
}//end of class
|
}//end of class
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user