fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-05-12 05:22:35 +09:00
Code Issues Projects Releases Packages Wiki Activity

Enhance permissions check on module config actions

Browse source
This commit is contained in:
Kijin Sung 2017-03-06 11:05:53 +09:00
parent 387dd1f78b
commit 81511e47b1
3 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
modules/comment/conf/module.xml
View file

@ -3,6 +3,7 @@
<grants /> <grants />
<permissions> <permissions>
<permission action="procCommentAdminAddCart" target="manager" /> <permission action="procCommentAdminAddCart" target="manager" />
<permission action="procCommentInsertModuleConfig" target="manager" />
<permission action="procCommentGetList" target="manager" /> <permission action="procCommentGetList" target="manager" />
<permission action="procCommentAdminMoveToTrash" target="manager" /> <permission action="procCommentAdminMoveToTrash" target="manager" />
</permissions> </permissions>

1
modules/document/conf/module.xml
View file

@ -3,6 +3,7 @@
<grants /> <grants />
<permissions> <permissions>
<permission action="dispDocumentAdminList" target="manager" /> <permission action="dispDocumentAdminList" target="manager" />
<permission action="procDocumentInsertModuleConfig" target="manager" />
<permission action="dispDocumentManageDocument" target="member" /> <permission action="dispDocumentManageDocument" target="member" />
<permission action="getDocumentCategories" target="member" /> <permission action="getDocumentCategories" target="member" />

4
modules/editor/conf/module.xml
View file

@ -1,7 +1,9 @@
<?xml version="1.0" encoding="utf-8"?> <?xml version="1.0" encoding="utf-8"?>
<module> <module>
<grants /> <grants />
<permissions /> <permissions>
<permission action="procEditorInsertModuleConfig" target="manager" />
</permissions>
<actions> <actions>
<action name="dispEditorPopup" type="view" /> <action name="dispEditorPopup" type="view" />
<action name="dispEditorComponentInfo" type="view" /> <action name="dispEditorComponentInfo" type="view" />