search

AdaHeads / call-flow-control

Call-information flow server.
Other
6 stars 8 forks source link

Add a way of verifying that a user owns a call #146

Closed sparre closed 10 years ago

sparre commented 10 years ago

Some operations on calls should only be permitted for the user "owning" a call (or possibly an administrator). This requires a function for checking if a call (ID) is owned by a user (HTTP request).

rostgaard commented 10 years ago

Request_Utilities.User_Of returns a User.Instance - Which has a user-ID that can be compared to the Assigned_To value of a Call.Instance. Assigned_To return a Natural right now, but should be changed to the User_Identification type.

User.Instance also has a Permissions method that returns a Permission_List. This list reveals if the user is an Administrator or not.

The blocks are there, they just didn't get assembled :-)