Uploaded image for project: 'Hippo Site Toolkit 2'
  1. Hippo Site Toolkit 2
  2. HSTTWO-3765

Return canManageChanges and canDeleteChannel in /composermode call based on privileges of current user

    XMLWordPrintable

    Details

    • Type: New Feature
    • Status: Closed
    • Priority: Normal
    • Resolution: Fixed
    • Affects Version/s: 4.1.0
    • Fix Version/s: 4.1.0
    • Component/s: None
    • Labels:
      None
    • Similar issues:
    • Story Points:
      0.5
    • Epic Link:
    • Processed by team:
      Tiger
    • Sprint:
      Platform Sprint 136, Tiger Sprint 137

      Description

      The 'canManageChanges' permissions used to be checked in Wicket code of the channel manager (in ChannelEditor.java). Since HSTTWO-3728 that logic got removed, and instead the /composermode REST call now returns those permissions. However, both canManageChanges and canDeleteChannel do not yet check the actual permissions of the current user. That should be fixed in this issue.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                mdenburger Mathijs den Burger
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: