Rule to access security
Rule to access security
- Subject: Rule to access security
- From: Theodore Petrosky <email@hidden>
- Date: Mon, 23 Jan 2012 07:29:35 -0800 (PST)
100 : (pageConfiguration = 'ListPerson' and session.user.security.canEditPerson = 'true') => isEntityEditable = true [com.webobjects.directtoweb.BooleanAssignment],
So I have this rule to access the security of my user. This must be wrong, because if I login as user1 and user1 has permission canEditPerson = true, when user2 logs in (and user2 canEditPeron = false) then user2 can edit the person EO. it is as if whoever was first wins and my app remembers.
I even tried adding:
100 : (pageConfiguration = 'ListPerson' and session.user.security.canEditPerson = 'false') => isEntityEditable = false [com.webobjects.directtoweb.BooleanAssignment],
What am I doing wrong?
Ted
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden