fernando/luos
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

BUG 8408 Acceso a Documentos por usuarios sin permiso... SOLVED

Browse Source 
- Not validated the permission PM_FOLDERS_VIEW.
- the user must have this permit and may only view documents in the processes that participate, and for see all with the permission PM_ALLCASES.
This commit is contained in:
Marco Antonio Nina
2012-07-19 16:07:17 -04:00
parent 0823fa907d
commit 3e22cd5c25
2 changed files with 9 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
workflow/engine/classes/model/AppFolder.php
View File

@@ -203,7 +203,7 @@ if($limit != 0){
return $folderArray;
}
function getFolderContent($folderID, $docIdFilter = array(), $keyword = NULL, $searchType = NULL, $limit=0, $start=0, $user=null) {
function getFolderContent($folderID, $docIdFilter = array(), $keyword = NULL, $searchType = NULL, $limit=0, $start=0, $user='') {
require_once ("classes/model/AppDocument.php");
require_once ("classes/model/InputDocument.php");
require_once ("classes/model/OutputDocument.php");
@@ -229,20 +229,23 @@ if($limit != 0){
$oCriteria->add ( AppDocumentPeer::APP_DOC_TAGS, "%" . $keyword . "%", CRITERIA::LIKE );
}
if ($user != null) {
if ($user != '') {
require_once ("classes/model/AppDelegation.php");
$criteria = new Criteria ();
$criteria->addSelectColumn (AppDelegationPeer::APP_UID);
$criteria->setDistinct();
$criteria->add (AppDelegationPeer::USR_UID, $user);
$conditions = array ();
$conditions [] = array (AppDelegationPeer::APP_UID, AppDocumentPeer::APP_UID);
$conditions [] = array (AppDelegationPeer::DEL_INDEX, AppDocumentPeer::DEL_INDEX);
$criteria->addJoin(AppDocumentPeer::APP_UID, AppDelegationPeer::APP_UID);
$criteria->addJoin(AppDocumentPeer::DEL_INDEX, AppDelegationPeer::DEL_INDEX);
$criteria->addJoinMC($conditions, Criteria::LEFT_JOIN);
$criteria->add(AppDelegationPeer::USR_UID, $user);
$rs2 = AppDocumentPeer::doSelectRS($criteria);
$rs2->setFetchmode(ResultSet::FETCHMODE_ASSOC);
//$rs->next();
$data = array();
while ($rs2->next()) {
$row = $rs2->getRow();