Skip to content

Version 1.2.2 - Full Management Permissions.

Choose a tag to compare

@istefan istefan released this 07 Oct 09:44
· 5 commits to main since this release

Enhancements

This release completes the permission model for power-users (Administrators & Managers), giving them full control over all data entries within the system.

  • Full CRUD Permissions for Managers: Users with the manage_ahoi_api_all_data capability can now perform GET, UPDATE, and DELETE operations on any entry from any custom table, regardless of the original owner.
  • Security Logic Refined: The get_item, update_item, and delete_item methods in the dynamic CRUD controller now correctly bypass ownership checks for these power-users, while maintaining strict security for regular users. This allows administrators to moderate content effectively from a client application.