Martin Trigaux
0b2ee16885
[FIX] project: access rights and followers
...
For privacy_visibility 'followers' or 'portal', the user should be follower of the project (not the task).
Remove public access to portal task
Fixes #2372
If no project on the task (or other rule), an employee (not a portal) can access if is follower of the task.
Follower rule is not enough as a user creating a rule will subscribe to the rule but to subscribe to record, the user should have access to it in the first place.
To make sure the snake does not bit its tail, fallback to give access on task where the user is reponsible (user_id = user.id).
Fixes #139
Adapted the tests to the new behaviour (removed not relevant and added some on creation)
2014-11-18 18:52:46 +01:00
..
2014-11-14 16:58:24 +01:00
2014-09-08 19:04:25 +02:00
2014-11-05 21:46:42 +01:00
2014-10-08 17:52:25 +02:00
2014-10-28 16:19:57 +01:00
2014-11-07 14:28:39 +01:00
2014-11-06 15:03:43 +01:00
2014-10-08 17:52:25 +02:00
2014-11-18 12:32:58 +01:00
2014-09-18 11:47:16 +02:00
2014-09-08 19:04:25 +02:00
2014-10-08 17:52:25 +02:00
2014-10-23 13:08:44 +02:00
2014-11-18 13:32:47 +01:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-11-13 14:48:53 +01:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-09-08 19:04:25 +02:00
2014-09-09 10:35:38 +02:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-09-08 19:04:25 +02:00
2014-10-20 17:06:30 +02:00
2014-11-04 13:47:57 +01:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-11-03 20:02:06 +01:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-11-05 21:46:42 +01:00
2014-10-29 16:34:00 +01:00
2014-11-06 15:34:02 +01:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-11-13 13:34:55 +01:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-10-23 16:52:37 +02:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-11-04 13:47:57 +01:00
2014-11-13 11:50:01 +01:00
2014-10-08 17:52:25 +02:00
2014-11-04 13:47:57 +01:00
2014-10-14 15:13:14 +02:00
2014-10-16 11:15:34 +02:00
2014-10-24 17:57:08 +02:00
2014-10-08 17:52:25 +02:00
2014-11-13 16:05:54 +01:00
2014-11-05 21:46:42 +01:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-11-13 13:34:55 +01:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-11-14 16:58:24 +01:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-11-13 13:34:55 +01:00
2014-11-13 11:26:44 +01:00
2014-10-29 19:33:02 +01:00
2014-11-13 11:03:22 +01:00
2014-08-28 16:51:11 +02:00
2014-08-26 21:40:18 +02:00
2014-08-26 21:40:18 +02:00
2014-08-26 21:40:18 +02:00
2014-08-26 21:40:18 +02:00
2014-08-26 21:40:18 +02:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-09-26 14:27:18 +02:00
2014-09-23 13:42:05 +02:00
2014-07-03 11:46:44 +02:00
2014-09-08 19:04:25 +02:00
2014-09-23 11:21:53 +02:00
2014-09-08 19:04:25 +02:00
2014-09-08 19:04:25 +02:00
2014-08-26 21:40:18 +02:00
2014-09-08 19:04:25 +02:00
2014-09-08 19:04:25 +02:00
2014-09-08 19:04:25 +02:00
2014-09-08 19:04:25 +02:00
2014-09-08 19:04:25 +02:00
2014-06-29 04:12:15 +02:00
2014-08-15 23:41:47 -05:00
2014-09-08 19:04:25 +02:00
2014-09-08 19:04:25 +02:00
2014-09-10 12:00:25 +02:00
2014-09-08 19:04:25 +02:00
2014-09-08 19:04:25 +02:00
2014-06-25 14:17:24 +02:00
2014-10-29 18:50:30 +01:00
2014-10-21 13:06:27 +02:00
2014-09-08 19:04:25 +02:00
2014-09-08 19:04:25 +02:00
2014-09-08 19:04:25 +02:00
2014-09-08 19:04:25 +02:00
2014-08-30 13:18:33 +02:00
2014-09-08 19:04:25 +02:00
2014-09-18 11:47:16 +02:00
2014-09-08 19:04:25 +02:00
2014-10-14 15:13:14 +02:00
2014-09-08 19:04:25 +02:00
2014-10-08 17:52:25 +02:00
2014-09-08 19:04:25 +02:00
2014-09-09 10:12:54 +02:00
2014-09-08 19:04:25 +02:00
2014-11-13 11:38:12 +01:00
2014-09-15 14:00:02 +02:00
2014-07-10 16:12:35 +02:00
2014-06-25 14:17:24 +02:00
2014-09-08 19:04:25 +02:00
2014-09-08 19:04:25 +02:00
2014-09-08 19:04:25 +02:00
2014-06-19 16:00:30 +02:00
2014-06-25 14:17:24 +02:00
2014-09-08 19:04:25 +02:00
2014-11-05 21:46:42 +01:00
2014-11-14 16:58:24 +01:00
2014-09-18 11:47:16 +02:00
2014-11-04 12:30:01 +01:00
2014-10-08 17:52:25 +02:00
2014-09-18 11:47:16 +02:00
2014-11-04 13:47:57 +01:00
2014-10-08 17:52:25 +02:00
2014-11-17 09:44:10 +01:00
2014-10-17 13:19:43 +02:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-09-23 13:42:05 +02:00
2014-11-05 21:46:42 +01:00
2014-09-08 19:04:25 +02:00
2014-11-04 13:47:57 +01:00
2014-09-08 19:04:25 +02:00
2014-11-04 13:47:57 +01:00
2014-11-12 10:31:29 +01:00
2014-11-12 10:31:29 +01:00
2014-11-12 10:31:29 +01:00
2014-11-12 10:31:29 +01:00
2014-09-23 13:42:05 +02:00
2014-11-18 18:52:46 +01:00
2014-11-17 11:31:27 +01:00
2014-09-23 13:42:05 +02:00
2014-11-18 18:52:46 +01:00
2014-09-23 13:42:05 +02:00
2014-10-08 17:52:25 +02:00
2014-09-18 11:47:16 +02:00
2014-10-08 17:52:25 +02:00
2014-11-17 09:44:10 +01:00
2014-10-08 17:52:25 +02:00
2014-11-14 16:58:24 +01:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-09-30 10:31:33 +02:00
2014-09-18 11:47:16 +02:00
2014-11-03 09:09:53 +01:00
2014-11-18 18:52:46 +01:00
2014-11-04 12:30:01 +01:00
2014-09-23 13:42:05 +02:00
2014-11-14 16:58:24 +01:00
2014-11-18 17:22:32 +01:00
2014-09-08 19:04:25 +02:00
2014-10-08 17:52:25 +02:00
2014-11-06 09:53:04 +01:00
2014-11-05 11:49:53 +01:00
2014-09-18 11:47:16 +02:00
2014-09-23 13:42:05 +02:00
2014-10-08 17:52:25 +02:00
2014-11-17 09:44:10 +01:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-11-13 17:20:10 +01:00
2014-10-08 17:52:25 +02:00
2014-10-29 19:33:02 +01:00
2014-10-08 17:52:25 +02:00
2014-11-05 17:42:21 +01:00
2014-10-08 17:52:25 +02:00
2014-11-13 11:50:01 +01:00
2014-11-05 21:46:42 +01:00
2014-11-04 13:47:57 +01:00
2014-11-17 09:44:10 +01:00
2014-11-17 09:44:10 +01:00
2014-10-08 17:52:25 +02:00
2014-09-18 11:47:16 +02:00
2014-10-08 17:52:25 +02:00
2014-11-09 10:01:13 +01:00
2014-09-23 13:42:05 +02:00
2014-10-08 17:52:25 +02:00
2014-09-23 13:42:05 +02:00
2014-10-08 17:52:25 +02:00
2014-11-14 18:02:02 +01:00
2014-08-26 21:40:18 +02:00
2014-07-18 13:45:41 +02:00
2014-11-05 21:46:42 +01:00
2014-10-11 21:49:44 +02:00
2014-09-18 11:47:16 +02:00
2014-10-31 09:45:33 +01:00
2014-11-07 14:21:35 +01:00
2014-09-18 11:47:16 +02:00
2014-07-04 14:42:38 +02:00
2014-10-08 17:52:25 +02:00
2014-09-08 19:04:25 +02:00
2014-10-08 17:52:25 +02:00
2014-10-08 17:52:25 +02:00
2014-11-14 16:19:33 +01:00
2014-11-05 21:46:42 +01:00
2014-10-21 16:28:20 +02:00
2014-11-04 13:47:57 +01:00
2014-10-08 17:52:25 +02:00
2014-09-23 13:42:05 +02:00
2014-10-08 17:52:25 +02:00
2014-10-24 14:16:16 +02:00
2014-10-08 17:52:25 +02:00
2014-11-18 17:42:13 +01:00
2014-09-23 13:42:05 +02:00
2014-10-08 17:52:25 +02:00
2014-09-23 13:42:05 +02:00
2014-09-23 13:42:05 +02:00
2014-10-08 17:52:25 +02:00
2014-09-16 19:54:59 +02:00
2014-09-23 13:42:05 +02:00
2014-11-04 13:47:57 +01:00
2014-11-13 14:48:13 +01:00
2014-10-14 15:13:14 +02:00
2014-09-23 13:42:05 +02:00
2014-11-05 21:46:42 +01:00
2014-09-23 13:42:05 +02:00
2014-10-15 18:00:15 +02:00
2014-10-08 17:52:25 +02:00
2014-11-18 11:41:27 +01:00
2014-11-13 13:34:55 +01:00
2014-11-05 21:46:42 +01:00
2014-11-05 21:46:42 +01:00