[jbossseam-issues] [JBoss JIRA] Created: (JBSEAM-3871) Member cann't access wikiNode which read_access_level setted to himself
5:26 a.m.
Member cann't access wikiNode which read_access_level setted to himself
-----------------------------------------------------------------------
Key: JBSEAM-3871
URL: https://jira.jboss.org/jira/browse/JBSEAM-3871
Project: Seam
Issue Type: Bug
Components: Wiki
Affects Versions: 2.1.1.GA
Reporter: wu haixing
Assignee: Christian Bauer
If a member create a document want to see by himself,currentAccessLevel Filter cann't
get the document because the member's access level obviously less than WikiNode's
READ_ACCESS_LEVEL setted to administrator's accessLevel.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
7:26 a.m.
New subject: [jbossseam-issues] [JBoss JIRA] Resolved: (JBSEAM-3871) Member cann't access wikiNode which read_access_level setted to himself
[
https://jira.jboss.org/jira/browse/JBSEAM-3871?page=com.atlassian.jira.pl...
]
wu haixing resolved JBSEAM-3871.
--------------------------------
Resolution: Done
DatabaseObjects.hbm.xml
<!-- Add param currentUserId to judge whether the User is the Node's createdBy
User -->
<filter-def name="accessLevelFilter">
<filter-param name="currentAccessLevel"
type="integer"/>
<filter-param name="currentUserId" type="long"/>
</filter-def>
components.xml
<persistence:filter name="accessLevelFilter">
<persistence:name>accessLevelFilter</persistence:name>
<persistence:parameters>
<key>currentAccessLevel</key><value>#{currentAccessLevel}</value>
<!-- set currentUserId as currentUser's id -->
<key>currentUserId</key><value>#{currentUser.id}</value>
</persistence:parameters>
</persistence:filter>
WikiNode.java
//we need the bracket,ignore readAccessLevel if the user is the document's owner
//I think no one will create a document himself cann't read,so this condition can
resolve the problem!
@org.hibernate.annotations.Filter(
name = "accessLevelFilter",
condition = "(READ_ACCESS_LEVEL <= :currentAccessLevel or CREATED_BY_USER_ID =
:currentUserId)"
)
Member cann't access wikiNode which read_access_level setted to
himself
-----------------------------------------------------------------------
Key: JBSEAM-3871
URL: https://jira.jboss.org/jira/browse/JBSEAM-3871
Project: Seam
Issue Type: Bug
Components: Wiki
Affects Versions: 2.1.1.GA
Reporter: wu haixing
Assignee: Christian Bauer
Original Estimate: 10 minutes
Remaining Estimate: 10 minutes
If a member create a document want to see by himself,currentAccessLevel Filter cann't
get the document because the member's access level obviously less than WikiNode's
READ_ACCESS_LEVEL setted to administrator's accessLevel.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
3:21 p.m.
New subject: [JBoss JIRA] Closed: (JBSEAM-3871) Member cann't access wikiNode which read_access_level setted to himself
[
https://jira.jboss.org/jira/browse/JBSEAM-3871?page=com.atlassian.jira.pl...
]
Pete Muir closed JBSEAM-3871.
-----------------------------
Member cann't access wikiNode which read_access_level setted to
himself
-----------------------------------------------------------------------
Key: JBSEAM-3871
URL: https://jira.jboss.org/jira/browse/JBSEAM-3871
Project: Seam
Issue Type: Bug
Components: Wiki
Affects Versions: 2.1.1.GA
Reporter: wu haixing
Assignee: Christian Bauer
Original Estimate: 10 minutes
Remaining Estimate: 10 minutes
If a member create a document want to see by himself,currentAccessLevel Filter cann't
get the document because the member's access level obviously less than WikiNode's
READ_ACCESS_LEVEL setted to administrator's accessLevel.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
5354
days inactive
5747
days old
2 comments
2 participants
participants (2)
-
Pete Muir (JIRA) -
wu haixing (JIRA)