FIX Removed duplicate permission check + SITETREEE_VIEW_ALL permission from DMSDocument::canEdit

This commit is contained in:
Franco Springveldt 2017-06-29 15:50:11 +12:00
parent a5ffec88bd
commit e2eead8888

View File

@ -134,7 +134,7 @@ class DMSDocument extends DataObject implements DMSDocumentInterface
} }
if ($this->CanViewType == 'OnlyTheseUsers' && $this->ViewerGroups()->count()) { if ($this->CanViewType == 'OnlyTheseUsers' && $this->ViewerGroups()->count()) {
return ($member && $member->inGroups($this->ViewerGroups())); return ($member && $member->inGroups($this->ViewerGroups()) || $this->canEdit($member));
} }
return $this->canEdit($member); return $this->canEdit($member);
@ -155,15 +155,7 @@ class DMSDocument extends DataObject implements DMSDocumentInterface
} }
// Do early admin check // Do early admin check
if ($member && Permission::checkMember( if ($member && Permission::checkMember($member, array('ADMIN','SITETREE_EDIT_ALL'))) {
$member,
array(
'ADMIN',
'SITETREE_EDIT_ALL',
'SITETREE_VIEW_ALL',
)
)
) {
return true; return true;
} }
@ -175,7 +167,7 @@ class DMSDocument extends DataObject implements DMSDocumentInterface
return $member && $member->inGroups($this->EditorGroups()); return $member && $member->inGroups($this->EditorGroups());
} }
return ($member && Permission::checkMember($member, array('ADMIN', 'SITETREE_EDIT_ALL'))); return false;
} }
/** /**