tonyair/silverstripe-subsites
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-subsites synced 2024-10-22 09:05:55 +00:00
Code Issues Projects Releases Wiki Activity

BUGFIX: Made subsite-specific access control less zealous

Browse Source
This commit is contained in:
Sam Minnee 2009-05-06 05:46:12 +00:00
parent 0531c868e1
commit 0170bcae79
1 changed files with 7 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
code/SiteTreeSubsites.php
View File

@ -116,25 +116,16 @@ class SiteTreeSubsites extends DataObjectDecorator {
* @return boolean
*/
function canEdit($member = null) {
if(!$member && $member !== FALSE) $member = Member::currentUser();
// Check the CMS_ACCESS_CMSMain privileges on the subsite that owns this group
$oldSubsiteID = Session::get('SubsiteID');
if(Permission::checkMember($member, 'SUBSITE_ACCESS_ALL')) return true;
Subsite::changeSubsite($this->owner->SubsiteID) ;
$access = Permission::check('CMS_ACCESS_CMSMain');
Subsite::changeSubsite($oldSubsiteID);
// if no subsites exist, member can edit from a subsites perspective
$allSubsites = DataObject::get('Subsite');
if(!$allSubsites) return true;
if(!$access) $access = Permission::checkMember($member, 'SUBSITE_ACCESS_ALL');
// otherwise get all allowed subsites, and check if the subsite
// this page belongs to is in the list
$allowedSubsites = Subsite::getSubsitesForMember($member);
if(
!$allowedSubsites
|| !in_array($this->owner->SubsiteID, $allowedSubsites->column('ID'))
) {
return false;
}
return true;
return $access;
}
/**