You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by ha...@apache.org on 2008/07/05 06:23:19 UTC
svn commit: r674150 -
/ofbiz/trunk/specialpurpose/projectmgr/script/org/ofbiz/project/ProjectPermissionServices.xml
Author: hansbak
Date: Fri Jul 4 21:23:18 2008
New Revision: 674150
URL: http://svn.apache.org/viewvc?rev=674150&view=rev
Log:
changed project security: should always be able to create and update ones own timesheet
Modified:
ofbiz/trunk/specialpurpose/projectmgr/script/org/ofbiz/project/ProjectPermissionServices.xml
Modified: ofbiz/trunk/specialpurpose/projectmgr/script/org/ofbiz/project/ProjectPermissionServices.xml
URL: http://svn.apache.org/viewvc/ofbiz/trunk/specialpurpose/projectmgr/script/org/ofbiz/project/ProjectPermissionServices.xml?rev=674150&r1=674149&r2=674150&view=diff
==============================================================================
--- ofbiz/trunk/specialpurpose/projectmgr/script/org/ofbiz/project/ProjectPermissionServices.xml (original)
+++ ofbiz/trunk/specialpurpose/projectmgr/script/org/ofbiz/project/ProjectPermissionServices.xml Fri Jul 4 21:23:18 2008
@@ -223,13 +223,11 @@
<not><if-has-permission permission="PROJECTMGR_ROLE_TIMESHEET_UPDATE"/></not>
<if-compare field="mainAction" value="UPDATE" operator="equals"/>
</and>
- <and>
- <if-has-permission permission="PROJECTMGR_ROLE_TIMESHEET_CREATE"/>
+ <and><!-- can always create ones own timesheet -->
<if-compare field="mainAction" value="CREATE" operator="equals"/>
<if-compare-field field="parameters.partyId" to-field="parameters.userLogin.partyId" operator="equals"/>
</and>
- <and>
- <if-has-permission permission="PROJECTMGR_ROLE_TIMESHEET_UPDATE"/>
+ <and><!-- can always update ones own timesheet -->
<if-compare field="mainAction" value="UPDATE" operator="equals"/>
<if-compare-field field="parameters.partyId" to-field="parameters.userLogin.userLoginId" operator="equals"/>
</and>