Folder/Document - Access rights

[Doudoux]

Hi

For a folder or a document, it's the first group that gives access rights.
Why does not entitle the least restrictive of all groups?

Sample

Group A

• user 1
  
• user 2
  

Group B

• user 1
  
• user 3
  

Folder access right

• Group A -> READ
  
• Group B -> READ + WRITE
  

With letoDMS : "user 1" can't write in folder

[steinm]

Hi

For a folder or a document, it's the first group that gives access rights.
Why does not entitle the least restrictive of all groups?

Sample

Group A

• user 1
  
• user 2
  

Group B

• user 1
  
• user 3
  

Folder access right

• Group A -> READ
  
• Group B -> READ + WRITE
  

With letoDMS : "user 1" can't write in folder

You are right. This should be fixed. I'll try to get it into the final version of 3.0.0.

Uwe

[Doudoux]

Hi

Good

I'm modified it in my installation

classes "LetoDMS_Core_Folder" and "LetoDMS_Core_Document", function getAccessMode

PHP Code:

foreach ($accessList["groups"] as $groupAccess) 
{
  if ($user->isMemberOfGroup($groupAccess->getGroup())) 
  {
    return $groupAccess->getMode();
  }
}
return $this->getDefaultAccess(); 


to

PHP Code:

$result = $this->getDefaultAccess();
    
foreach ($accessList["groups"] as $groupAccess) 
{
  if ($user->isMemberOfGroup($groupAccess->getGroup()))
  {
     if ($groupAccess->getMode()>$result)
       $result  = $groupAccess->getMode();
  }
}

return $result; 


I did not change ACLs on user, I do not think this is necessary :
- first : ACL user
- second : ACL group

Doudoux

[steinm]

Hi

Good

I'm modified it in my installation

classes "LetoDMS_Core_Folder" and "LetoDMS_Core_Document", function getAccessMode

PHP Code:

foreach ($accessList["groups"] as $groupAccess) 
{
  if ($user->isMemberOfGroup($groupAccess->getGroup())) 
  {
    return $groupAccess->getMode();
  }
}
return $this->getDefaultAccess(); 


to

PHP Code:

$result = $this->getDefaultAccess();
    
foreach ($accessList["groups"] as $groupAccess) 
{
  if ($user->isMemberOfGroup($groupAccess->getGroup()))
  {
     if ($groupAccess->getMode()>$result)
       $result  = $groupAccess->getMode();
  }
}

return $result; 


I did not change ACLs on user, I do not think this is necessary :
- first : ACL user
- second : ACL group

I commited your code to the svn. It will also be in 3.0.0
Thanks for your support.

Uwe