fixed ACL for status offer, it respects now the regular read-access restrictions

This commit is contained in:
Ralf Becker 2004-08-22 19:21:50 +00:00
parent 19e5c50947
commit 1f69400c71

View File

@ -128,7 +128,9 @@
// private: own entries plus the one user is responsible for // private: own entries plus the one user is responsible for
if ($filter == 'private' || $filter == 'own') if ($filter == 'private' || $filter == 'own')
{ {
$filtermethod .= " OR (info_responsible=$this->user OR info_status = 'offer')". $filtermethod .= " OR (info_responsible=$this->user".
($filter == 'own' && count($public_user_list) ? // offer's should show up in own, eg. startpage, but need read-access
" OR info_status = 'offer' AND info_owner IN(" . implode(',',$public_user_list) . ')' : '').")".
" AND (info_access='public'".($has_private_access?" OR $has_private_access":'').')'; " AND (info_access='public'".($has_private_access?" OR $has_private_access":'').')';
} }
else // none --> all entrys user has rights to see else // none --> all entrys user has rights to see