[Cubicweb] ERQLExpression for update and delete permissions

Sylvain Thénault sylvain.thenault at logilab.fr
Thu Sep 30 08:37:44 CEST 2010


On 29 septembre 23:18, Carlos Balderas wrote:
> > a quick test using your cube showed me that the problem lies in permission
> > checking done for action of the 'actions' box: each entity in the result
> > set is checked to see if the user has the 'update' and 'delete' permission
> > on it (for respectivly the 'modify' and 'delete' actions). I'm afraid we
> > can't do that much about it. The proper solution would probably be to
> > have an api to test if a permission is granted on a whole rset, instead of
> > processing entities one by one. Would you add a ticket for this?
> >
> 
> Ticket #1262362

thanks!
-- 
Sylvain Thénault                               LOGILAB, Paris (France)
Formations Python, Debian, Méth. Agiles: http://www.logilab.fr/formations
Développement logiciel sur mesure:       http://www.logilab.fr/services
CubicWeb, the semantic web framework:    http://www.cubicweb.org




More information about the Cubicweb mailing list