| #
d4f83172 |
| 31-Aug-2023 |
Andreas Gohr <andi@splitbrain.org> |
code style: line breaks
|
| #
177d6836 |
| 31-Aug-2023 |
Andreas Gohr <andi@splitbrain.org> |
coding style: control flow whitespaces
|
| #
d868eb89 |
| 30-Aug-2023 |
Andreas Gohr <andi@splitbrain.org> |
codestyle adjustments: function declaration braces/spaces
|
| #
8c7c53b0 |
| 30-Aug-2023 |
Andreas Gohr <andi@splitbrain.org> |
codestyle adjustments: class declaration braces
|
| #
79a2d784 |
| 05-Jan-2022 |
Gerrit Uitslag <klapinklapin@gmail.com> |
import classes, replace dbglog, simplify, remove unused statements, and other warnings from IntelliJ
update phpdocs, rename dokuwiki/Ui/Draft to PageDraft
|
| #
c45ab550 |
| 05-Jan-2021 |
Andreas Gohr <andi@splitbrain.org> |
minor cleanup in AdminAction
removed unecessary method, added doc blocks
|
| #
e1d9dcc8 |
| 15-Jun-2018 |
Andreas Gohr <andi@splitbrain.org> |
First go at moving the plugin classes into their own namespace
|
| #
4f32ee18 |
| 30-Oct-2018 |
Andreas Gohr <gohr@cosmocode.de> |
relax access to admin action
Since we want to check the access to the Admin plugins on an individual basis, we need to grant access to all logged in users at first. This means a user could access th
relax access to admin action
Since we want to check the access to the Admin plugins on an individual basis, we need to grant access to all logged in users at first. This means a user could access the admin page, but would not see any plugins available.
show more ...
|
| #
64cdf779 |
| 30-Oct-2018 |
Andreas Gohr <gohr@cosmocode.de> |
add event to check access to admin plugins
This adds a new method that capsulates the access check that has to be done to decide if an admin plugin's page should be shown to the user. The default im
add event to check access to admin plugins
This adds a new method that capsulates the access check that has to be done to decide if an admin plugin's page should be shown to the user. The default implementation is the same as before, relying only on the forAdminOnly() method and the users' isadmin or ismanager status.
Admin plugins themselves can override the method to do additional checks. In this patch, I added that to the usermanager plugin which will only return true if the current auth backend can list users.
However the real idea behind this change is that the new method emits a new event called ADMINPLUGIN_ACCESS_CHECK which would allow plugins to overwrite it. This way it could be possible to give certain user groups access to certain admin plugins without giving them admin or manager permissions.
Note: this does not change how the "Admin" link is shown, it still depends on ismanager or isadmin. A plugin as mentioned above would need to influence the display via the MENU_ITEMS_ASSEMBLY event.
Note: this only covers the basic access check. Admin plugins may need further adjustments for access to other parts of the plugin (like AJAX components). An additional commit will update this for the bundled plugins.
show more ...
|
| #
b2c9cd19 |
| 12-Apr-2018 |
Andreas Gohr <gohr@cosmocode.de> |
renamed ActionRouter::checkPermissions to checkPreconditions
As discussed in #1933
|
| #
ec701221 |
| 31-Mar-2017 |
Andreas Gohr <andi@splitbrain.org> |
explicitly declare method visibility
|
| #
ab583a1b |
| 11-Feb-2017 |
Andreas Gohr <andi@splitbrain.org> |
more doc block fixes
|
| #
f21dad39 |
| 11-Feb-2017 |
Andreas Gohr <andi@splitbrain.org> |
all actions should have a class now
Lots of FIXMEs and the routing isn't integrated, yet
|