Dev: Owners should be able to edit their participants (CPDB)

LimeSurvey · Sep 28, 2016 · f88173d · f88173d
1 parent a80dfae
commit f88173d
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/application/controllers/admin/participantsaction.php b/application/controllers/admin/participantsaction.php
@@ -602,7 +602,6 @@ public function updateParticipant($aData, $extraAttributes)
             ls\ajax\AjaxHelper::outputError(sprintf('Found no participant with id %s', $aData['participant_id']));
         }
 
-        // Abort if no permission
         if (!$participant->userHasPermissionToEdit()) {
             ls\ajax\AjaxHelper::outputNoPermission();
         }

diff --git a/application/models/Participant.php b/application/models/Participant.php
@@ -2103,6 +2103,8 @@ public function userHasPermissionToEdit()
             'participant_id' => $this->participant_id
         ));
 
+        $owner = $this->owner_uid == $userId;
+
         if (Permission::model()->hasGlobalPermission('superadmin')) {
             // Superadmins can do anything
             return true;
@@ -2115,6 +2117,10 @@ public function userHasPermissionToEdit()
             // Shared with this particular user
             return true;
         }
+        else if ($owner) {
+            // User owns this participant
+            return true;
+        }
         else {
             return false;
         }