search

andrewblake1 / WorksManagement

Project/Works management system for Northpower's Westcoast Energy
0 stars 3 forks source link

Roles can't be added to Project when logged in as project manager #401

Closed hawea closed 10 years ago

hawea commented 10 years ago
  1. To view bug, please log on as phil.sylva@westcoastenergy.com.au p/w: password
  2. Next please go to this link: http://dev.melbourne.wcewm.co.nz/ProjectToAuthItem/admin?project_id=101
  3. Next, click on +New and try to select something from drop down bo
  4. You will notice nothing is available to select.
andrewblake1 commented 10 years ago

@hawea check resolved and please shift to an archive issue:

NB: have created minor low security risk whereby a logged in user with some hacking knowledge is now able to gain access to data via the autocomplete and dependant list actions.

This can be resolved and have added a TODO on line 137 of Controller.php

Basically the actions were restricted to users with Read access and since this form was wanting to access the AuthItem table but project manager doesn't really need this in general then access wasn't there.