Task #1620
Story #1619: Revise AccessPolicy and AccessRule
Obtain concensus for proposed change
Status:
Closed
Priority:
Normal
Assignee:
Category:
Authentication, Authorization
Target version:
Start date:
2011-06-06
Due date:
% Done:
100%
Milestone:
Product Version:
*
Story Points:
Sprint:
History
#1 Updated by Dave Vieglais almost 13 years ago
- Status changed from New to In Progress
Discussion on 2011-06-06:
It is a good thing to be able to set the permissions on multiple objects at once.
The mechanism for (1) should be a new API call rather than the current approach of overloading the setAccessPolicy method, as the AccessPolicy type definition confusing when used in two way - one to define the access control rules for a single object (in system metadata), the other as a mechanism for settign the access control on multiple objects (through the setAccessPolicy method).
Conclusions:
1. remove "resource" from AccessRule.
2. create a new authorization API method that enables setting the access rules on multiple objects with a single call.
#2 Updated by Dave Vieglais almost 13 years ago
- Category set to Authentication, Authorization
#3 Updated by Dave Vieglais almost 13 years ago
- Status changed from In Progress to Closed
- translation missing: en.field_remaining_hours set to 0.0
