search

enonic / app-formbuilder

Apache License 2.0
2 stars 7 forks source link

Only users with write permissions for the form should be able to see answers #9

Closed sigdestad closed 4 years ago

sigdestad commented 5 years ago

Add this check to the widget panel

hjelmevold commented 5 years ago

Done. If the user has a role that has write permissions on the form content, the widget is shown.

sigdestad commented 5 years ago

Does it have to be a role? What if it is a group or transitive membership or directly on the user?

hjelmevold commented 5 years ago

Ah, all the perspectives that I've never had to consider before, when I was used to the content library resolving everything for me automagically ;-)

sigdestad commented 5 years ago

From the context, you should be able to get all principals (even the transitive ones) and then see if any of these have write permission on the item.

hjelmevold commented 4 years ago

Write permission checks in the widget panel have now been implemented and will be part of the 2.1 release (rudimentary support for file inputs and downloading of files from reports)