Skip to content

1.4.4

Choose a tag to compare

View all tags
@rhukster rhukster released this 04 Jul 00:28
· 30 commits to master since this release
1.4.4
1bc4c19
This commit was signed with the committer’s verified signature.
rhukster Andy Miller
GPG key ID: 9F2CF38AEBDB0AE0
Verified
Learn about vigilant mode.

Bugfix

  • A non-super-admin user who is granted a Flex directory's own admin permission can now see and edit that directory's objects through the Admin Next API and sidebar without needing any other admin access. The check used FlexDirectory::isAuthorized(), which applies a test scope prefix when a user is passed explicitly and so always denied non-super-admins in API context; the API controller and the sidebar registration now resolve the directory's admin.permissions prefixes through the API PermissionResolver (with parent-key inheritance) (#229, #230).

Improved

  • The Flex API and admin-next sidebar permission checks are unified in a shared DirectoryPermission::isAuthorized() helper so they can't drift apart, and the sidebar sweep now builds a single PermissionResolver instead of one per directory.
Assets 2
Loading