[TikiWiki-commits] [Git][tikiwiki/tiki][27.x] [MOD] trackers: Allow non-admins to see tracker item links in XHR requests

"Jonny Bradley \(@jonnybradley\) via TikiWiki-cvs" <[email protected]>
Newsgroups gmane.comp.cms.tiki.cvs
Message-ID <6993626f622ce_3b18bdc0466e6@gitlab-sidekiq-low-urgency-cpu-bound-v2-6547747b55-49hqg.mail>

Jonny Bradley pushed to branch 27.x at Tiki Wiki CMS Groupware / Tiki


Commits:
18b5c229 by Jonny Bradley at 2026-02-16T18:31:08+00:00
[MOD] trackers: Allow non-admins to see tracker item links in XHR requests
---
* [MOD] trackers: Allow non-admins to see tracker item links in XHR request when adminOnlyViewEditItem is enabled.
Needed for Cartograf

See merge request tikiwiki/tiki!9583


(cherry picked from commit 5a5069175eee36ddb6154c2169f6a96598f44406)

32b8e4f5 [MOD] trackers: Allow non-admins to see tracker item links in XHR request when...

Co-authored-by: Jonny Bradley <[email protected]>

(cherry picked from commit 4f9189e87145b76fb1a85617d01159acde822959)

Co-authored-by: Jonny Bradley <[email protected]>
- - - - -


1 changed file:

- lib/smarty_tiki/FunctionHandler/ObjectLink.php


Changes:

=====================================
lib/smarty_tiki/FunctionHandler/ObjectLink.php
=====================================
@@ -230,7 +230,14 @@ class ObjectLink extends Base
             $pre .= " ";
         }
 
-        if ($item && $item->canView() && (! $item->getDefinition()->isEnabled('adminOnlyViewEditItem') || Perms::get('trackeritem', $object)->admin_trackers)) {
+        if (
+            $item && $item->canView() &&
+            (
+                ! $item->getDefinition()->isEnabled('adminOnlyViewEditItem') ||
+                Perms::get('trackeritem', $object)->admin_trackers ||
+                \TikiLib::lib('access')->is_serializable_request()
+            )
+        ) {
             return $pre . $this->smartyFunctionObjectLinkDefault($template, $object, $title, $type, $url, $params);
         } else {
             if (empty($title)) {



View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/18b5c2299e57c22167b50eccdb8b94a9f8130ca1

-- 
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/18b5c2299e57c22167b50eccdb8b94a9f8130ca1
You're receiving this email because of your account on gitlab.com.

_______________________________________________
TikiWiki-cvs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-cvs
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.