[gatein-commits] gatein SVN: r6234 - portal/branches/decoupled-webos/webui/portal/src/main/java/org/exoplatform/portal/webui/page.

do-not-reply at jboss.org do-not-reply at jboss.org
Fri Apr 15 03:51:47 EDT 2011


Author: phuong_vu
Date: 2011-04-15 03:51:47 -0400 (Fri, 15 Apr 2011)
New Revision: 6234

Modified:
   portal/branches/decoupled-webos/webui/portal/src/main/java/org/exoplatform/portal/webui/page/UIPageBrowser.java
Log:
GTNPORTAL-1793 Should not allow to delete pages of other users (page that have OwnerType : user)

Modified: portal/branches/decoupled-webos/webui/portal/src/main/java/org/exoplatform/portal/webui/page/UIPageBrowser.java
===================================================================
--- portal/branches/decoupled-webos/webui/portal/src/main/java/org/exoplatform/portal/webui/page/UIPageBrowser.java	2011-04-15 07:50:07 UTC (rev 6233)
+++ portal/branches/decoupled-webos/webui/portal/src/main/java/org/exoplatform/portal/webui/page/UIPageBrowser.java	2011-04-15 07:51:47 UTC (rev 6234)
@@ -267,7 +267,8 @@
          }
          Page page = service.getPage(id, pcontext.getRemoteUser());
 
-         if (page == null || !page.isModifiable())
+         if (page == null || !page.isModifiable() ||
+            (page.getOwnerType().equals(PortalConfig.USER_TYPE) && !page.getOwnerId().equals(pcontext.getRemoteUser())))
          {
             uiPortalApp.addMessage(new ApplicationMessage("UIPageBrowser.msg.delete.NotDelete", new String[]{id}, 1));
             pcontext.addUIComponentToUpdateByAjax(uiPortalApp.getUIPopupMessages());



More information about the gatein-commits mailing list