Task #26750

Story #26749: As a speaker only submitted papers should be visible to Track Chairs

Create / Revise Policies of Conference package

Added by Bastian Waidelich over 8 years ago. Updated over 8 years ago.

Status:
New
Priority:
Should have
Target version:
Start date:
2011-05-11
Due date:
% Done:

0%


Description

Policies need to be added/revised to protect restricted actions

Associated revisions

Revision 7a0e44eb (diff)
Added by Bastian Waidelich over 8 years ago

[~TASK] protect CRUD actions of PaperController

And some smaller tweaks and fixes:

- Add Policy to limit access to PaperController actions to Speakers and TrackChairs
- Protect papers so they are only editable/deletable by the owner or speakers
(This should eventually be done with Policies)
- Add custom finder method findByAuthorOrSpeaker() to PaperRepository
- Add author and nr of comments to myPapers overview

Change-Id: I7891dcf044b63d0aacbd6e88e93a3a215fb9d77c
Related: #26750

History

#1 Updated by Bastian Waidelich over 8 years ago

The access rights for properties of a paper depend on several conditions:
  1. user is owner of the paper?
  2. user is speaker of the paper?
  3. status of the paper (draft, submitted, rejected, accepted, scheduled)

Is it possible to respect those conditions in policies? Otherwise we'll need to check this in the respective controllers

#2 Updated by Andreas Förthner over 8 years ago

Yes it is possible! See the evaluate pointcut designator you can use while defining your method resources: http://flow3.typo3.org/documentation/manuals/flow3/flow3.aopframework/#id36281924

#3 Updated by Bastian Waidelich over 8 years ago

  • Assignee set to Andreas Förthner
  • Target version changed from Call for Papers to Backend Editing

The checks are done in the controller for now, but it would be good to have Policies for testing & demonstration purposes

#4 Updated by Bastian Waidelich over 8 years ago

  • Target version changed from Call for Papers to Backend Editing

#5 Updated by Bastian Waidelich over 8 years ago

  • Parent task changed from #26749 to #26932

#6 Updated by Bastian Waidelich over 8 years ago

  • Parent task changed from #26932 to #26749

Also available in: Atom PDF