natalie/indefero
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Do not display all project to a user if he has no rights for

Browse Source 
_any_ project of the forge, but actually hide all... thanks
to René Klomp for this finding!
This commit is contained in:
Thomas Keller
2012-05-11 23:25:06 +02:00
parent 0826dab575
commit bcd515eed5
2 changed files with 17 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
src/IDF/Views.php
View File

@@ -443,10 +443,12 @@ class IDF_Views
}
$projectIds = self::getUserVisibleProjectIds($user);
if (count($projectIds) > 0) {
$sql->SAnd(new Pluf_SQL(sprintf($db->pfx.'idf_projects.id IN (%s)', implode(', ', $projectIds))));
if (count($projectIds) == 0) {
return new ArrayObject();
}
$sql->SAnd(new Pluf_SQL(sprintf($db->pfx.'idf_projects.id IN (%s)', implode(', ', $projectIds))));
$orderTypes = array(
'name' => 'name ASC',
'activity' => 'value DESC, name ASC',
@@ -470,10 +472,12 @@ class IDF_Views
$sql = new Pluf_SQL('project IS NULL');
$projectIds = self::getUserVisibleProjectIds($user);
if (count($projectIds) > 0) {
$sql->SAnd(new Pluf_SQL(sprintf('idf_project_id IN (%s)', implode(', ', $projectIds))));
if (count($projectIds) == 0) {
return new ArrayObject();
}
$sql->SAnd(new Pluf_SQL(sprintf('idf_project_id IN (%s)', implode(', ', $projectIds))));
$tagList = Pluf::factory('IDF_Tag')->getList(array(
'filter' => $sql->gen(),
'view' => 'join_projects',