ENH: refs #0436. Item creator (via web api) should get admin policy on the item

zachmullen · zachmullen · commit e9fb5a0f27f7 · 2012-01-04T11:54:43.000-05:00
diff --git a/modules/api/controllers/components/ApiComponent.php b/modules/api/controllers/components/ApiComponent.php
@@ -933,11 +933,17 @@ function itemCreate($args)
         {
         throw new Exception('Parent folder doesn\'t exist', MIDAS_INVALID_PARAMETER);
         }
+      if(!$folderModel->policyCheck($folder, $userDao, MIDAS_POLICY_WRITE))
+        {
+        throw new Exception('Invalid permissions on parent folder', MIDAS_INVALID_POLICY);
+        }
       $item = $itemModel->createItem($name, $description, $folder, $uuid);
       if($item === false)
         {
         throw new Exception('Create new item failed', MIDAS_INTERNAL_ERROR);
         }
+      $itempolicyuserModel = $modelLoader->loadModel('Itempolicyuser');
+      $itempolicyuserModel->createPolicy($userDao, $item, MIDAS_POLICY_ADMIN);
 
       return $item->toArray();
       }

Original file line number	Diff line number	Diff line change
`@@ -933,11 +933,17 @@ function itemCreate($args)`
`933`	`933`	`{`
`934`	`934`	`throw new Exception('Parent folder doesn\'t exist', MIDAS_INVALID_PARAMETER);`
`935`	`935`	`}`
	`936`	`+ if(!$folderModel->policyCheck($folder, $userDao, MIDAS_POLICY_WRITE))`
	`937`	`+ {`
	`938`	`+ throw new Exception('Invalid permissions on parent folder', MIDAS_INVALID_POLICY);`
	`939`	`+ }`
`936`	`940`	`$item = $itemModel->createItem($name, $description, $folder, $uuid);`
`937`	`941`	`if($item === false)`
`938`	`942`	`{`
`939`	`943`	`throw new Exception('Create new item failed', MIDAS_INTERNAL_ERROR);`
`940`	`944`	`}`
	`945`	`+ $itempolicyuserModel = $modelLoader->loadModel('Itempolicyuser');`
	`946`	`+ $itempolicyuserModel->createPolicy($userDao, $item, MIDAS_POLICY_ADMIN);`
`941`	`947`
`942`	`948`	`return $item->toArray();`
`943`	`949`	`}`