tonyair/silverstripe-subsites
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-subsites synced 2024-06-23 04:59:36 +02:00
Code Issues Projects Releases Wiki Activity

Merge pull request #132 from mateusz/session-can-edit

Browse Source 
Make canEdit fall back to session if the object's SubsiteID not there.
This commit is contained in:
Sean Harvey 2014-01-14 14:07:32 -08:00
commit 4e20228c2e
1 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
code/extensions/SiteTreeSubsites.php
View File

@ -127,13 +127,25 @@ class SiteTreeSubsites extends DataExtension {
* @return boolean
*/
function canEdit($member = null) {
if(!$member) $member = Member::currentUser();
// Find the sites that this user has access to
$goodSites = Subsite::accessible_sites('CMS_ACCESS_CMSMain',true,'all',$member)->column('ID');
if (!is_null($this->owner->SubsiteID)) {
$subsiteID = $this->owner->SubsiteID;
} else {
// The relationships might not be available during the record creation when using a GridField.
// In this case the related objects will have empty fields, and SubsiteID will not be available.
//
// We do the second best: fetch the likely SubsiteID from the session. The drawback is this might
// make it possible to force relations to point to other (forbidden) subsites.
$subsiteID = Subsite::currentSubsiteID();
}
// Return true if they have access to this object's site
if(!(in_array(0, $goodSites) || in_array($this->owner->SubsiteID, $goodSites))) return false;
if(!(in_array(0, $goodSites) || in_array($subsiteID, $goodSites))) return false;
}
/**