On Wed, Apr 29, 2009 at 7:07 PM, Lukas Renggli <renggli@gmail.com> wrote:
>> Suppose you are a final user with finalUser group. You will be
>> able to add a PRBlogWithAuthorization but won't be able to add a PRBlog.
>> However, both of them are shown in the list. Ok, I that user selects a
>> PRBlog then Pier says "permission denied". But, I would like to avoid this
>> step. I mean, each user see in that list the thing he has permissions for.
>
> I'll have to check this, I thought this was filtered?

You are right, this is something I missed. I fixed this issue in
Pier-Security-lr.137. Please let me know if this solves the problem.

Name: Pier-Security-lr.137
Author: lr
Time: 30 April 2009, 12:06:13 am
UUID: 9ddcb800-7198-4937-8413-d979ffb01263
Ancestors: Pier-Security-lr.136

- only show the add actions, that the user actually has the permission for


:) Perfect!!!!

Thanks a lot !!!
 


Lukas

--
Lukas Renggli
http://www.lukas-renggli.ch
_______________________________________________
Magritte, Pier and Related Tools ...
https://www.iam.unibe.ch/mailman/listinfo/smallwiki