ppazos / cabolabs-ehrserver

Open platform to manage and share standardized clinical data, designed by @ppazos at CaboLabs Health Informatics.
https://cabolabs.com
Apache License 2.0
177 stars 110 forks source link

Migrate activityLogController.show #1060

Closed ppazos closed 4 years ago

ppazos commented 4 years ago

New code:

def show(Long id)
   {
      def activityLogInstance = ActivityLog.get(id)

      // admins can access all logs
      // filter by current org! because it is accessed by id
      if (!SpringSecurityUtils.ifAllGranted("ROLE_ADMIN") &&
          (!activityLogInstance || activityLogInstance.organizationUid != session.organization.uid))
      {
         flash.message = message(code:'activityLog.show.cantAccessLog')
         redirect action:'index'
         return
      }
      return [activityLogInstance: activityLogInstance]
   }
ppazos commented 4 years ago

this was already done