[Logo] JForum - Powering Communities
  [Search] Search   [Recent Topics] Recent Topics   [Hottest Topics] Hottest Topics   [Top Downloads] Top Downloads   [Groups] Back to home page 
[Register] Register /  [Login] Login 

The final version of JForum 2.7.0 has been released with lots of improvements. Read all about it here

Calrification about permission check in canAccess() method RSS feed
Forum Index » Developer Forum
Author Message

Joined: 2014/11/11
Messages: 1

I need a clarification about
@ net.jforum.repository.SecurityRepository
public static boolean canAccess(int userId, String roleName, String value) {
return (value != null ? pc.canAccess(roleName, value) : pc.canAccess(roleName)); <------
why if the (value == null ) , it calls ( pc.canAccess(roleName))
That causes a bug that if the user don't have a permission (like:perm_create_sticky_announcement_topics)on a forum (A) , but have it on another forum (B), he will get that permission on (A) too
Forum Index » Developer Forum
Go to:   
Mobile view
Powered by JForum 2.7.0 © 2020 JForum Team • Maintained by Andowson Chang and Ulf Dittmer