[TikiWiki-commits] [Git][tikiwiki/tiki][master] [MOD] trackers: Allow non-admins to see tracker item links in XHR requests
"Jonny Bradley \(@jonnybradley\) via TikiWiki-cvs" <[email protected]>
| Newsgroups | gmane.comp.cms.tiki.cvs |
|---|---|
| Message-ID | <699361bca7ce2_3b1863ac530ad@gitlab-sidekiq-low-urgency-cpu-bound-v2-6547747b55-n46c2.mail> |
Jonny Bradley pushed to branch master at Tiki Wiki CMS Groupware / Tiki
Commits:
5a506917 by Jonny Bradley at 2026-02-16T18:20:34+00:00
[MOD] trackers: Allow non-admins to see tracker item links in XHR requests
---
* [MOD] trackers: Allow non-admins to see tracker item links in XHR request when adminOnlyViewEditItem is enabled.
Needed for Cartograf
See merge request tikiwiki/tiki!9583
- - - - -
1 changed file:
- lib/smarty_tiki/FunctionHandler/ObjectLink.php
Changes:
=====================================
lib/smarty_tiki/FunctionHandler/ObjectLink.php
=====================================
@@ -233,7 +233,14 @@ class ObjectLink extends Base
$pre .= " ";
}
- if ($item && $item->canView() && (! $item->getDefinition()->isEnabled('adminOnlyViewEditItem') || Perms::get('trackeritem', $object)->admin_trackers)) {
+ if (
+ $item && $item->canView() &&
+ (
+ ! $item->getDefinition()->isEnabled('adminOnlyViewEditItem') ||
+ Perms::get('trackeritem', $object)->admin_trackers ||
+ \TikiLib::lib('access')->is_serializable_request()
+ )
+ ) {
return $pre . $this->smartyFunctionObjectLinkDefault($template, $object, $title, $type, $url, $params);
} else {
if (empty($title)) {
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/5a5069175eee36ddb6154c2169f6a96598f44406
--
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/5a5069175eee36ddb6154c2169f6a96598f44406
You're receiving this email because of your account on gitlab.com.
_______________________________________________
TikiWiki-cvs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-cvs