Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security on FORMPERMISSIONS #6

Open
eduard93 opened this issue Jul 5, 2016 · 2 comments
Open

Security on FORMPERMISSIONS #6

eduard93 opened this issue Jul 5, 2016 · 2 comments
Assignees

Comments

@eduard93
Copy link
Contributor

eduard93 commented Jul 5, 2016

No description provided.

@eduard93 eduard93 changed the title Security on FORMPERSISSIONS Security on FORMPERMISSIONS Jul 5, 2016
@eduard93
Copy link
Contributor Author

eduard93 commented Jul 8, 2016

Discussed with @dmitry-zasypkin today. Points:

  • Parameter FORMEDITROLE - form-specific role if $roles has it, user can edit form fields
  • Parameter CANCREATEFORM - application wide role, that $roles must possess for user to create forms
  • QUESTION: role check&inheritance ($roles has a role1, which has role2). Param (from above) is role2. How do we check that $roles has role2

@eduard93
Copy link
Contributor Author

eduard93 commented Jul 8, 2016

Answer: roles are flattened. In the above example (user has role1 which has role2, users $roles would be equal to role1,role2)

Except for %ALL

@eduard93 eduard93 self-assigned this Jul 22, 2016
isc-afuentes pushed a commit to isc-afuentes/RESTForms2 that referenced this issue Dec 17, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant