search

ohmage / gwt-front-end

The javascript/GWT code behind the front end.
6 stars 2 forks source link

Update document/read #223

Closed jojenki closed 12 years ago

jojenki commented 12 years ago

Currently, document/read passes in a required parameter "personal_documents" as true and all of the campaigns and classes to which the user belongs. This API has been updated to now no longer require "personal_documents". As a result, if no parameters are passed in, all documents visible to the user are returned. The effect is the same with the bonus that admins will see all documents and non-admins will see only their personal documents and those indirectly related to them through campaigns and classes.

ghost commented 12 years ago

@jojenki: So can I safely omit the "personal_documents" parameter now? It seems that the policy for the FrontEnd would always want to access all possible documents.

Note: This change also needs to be documented in ohmageServer wiki