[TikiWiki-commits] [Git][tikiwiki/tiki][master] [FIX] Tracker Controller: Update permission check for admin trackers to use...

"Bruno Kambere \(@kambereBr\) via TikiWiki-cvs" <[email protected]>
Newsgroups gmane.comp.cms.tiki.cvs
Message-ID <6a170ecca916d_38192f6c8765b@gitlab-sidekiq-low-urgency-cpu-bound-v2-5bdf85c9dc-l9zt8.mail>

Bruno Kambere pushed to branch master at Tiki Wiki CMS Groupware / Tiki


Commits:
c916bf6a by UshindiG at 2026-05-27T18:15:35+03:00
[FIX] Tracker Controller: Update permission check for admin trackers to use...
---
* [FIX] Tracker Controller: Update permission check for admin trackers to use specific tracker permissions

See merge request tikiwiki/tiki!10235

- - - - -


1 changed file:

- lib/core/Services/Tracker/Controller.php


Changes:

=====================================
lib/core/Services/Tracker/Controller.php
=====================================
@@ -737,11 +737,6 @@ class Services_Tracker_Controller
     {
         // TODO : Eventually, this method should filter according to the actual permissions, but because
         //        it is only to be used for tracker sync at this time, admin privileges are just fine.
-
-        if (! Perms::get()->admin_trackers) {
-            throw new Services_Exception_Denied(tr('Reserved for tracker administrators'));
-        }
-
         $trackerId = $input->trackerId->int();
         $offset = $input->offset->int();
         $maxRecords = $input->maxRecords->int();
@@ -749,6 +744,11 @@ class Services_Tracker_Controller
         $format = $input->format->word();
         $modifiedSince = $input->modifiedSince->int();
 
+        $perms = Perms::get('tracker', $trackerId);
+        if (! $perms->admin_trackers) {
+            throw new Services_Exception_Denied(tr('Reserved for tracker administrators'));
+        }
+
         $definition = Tracker_Definition::get($trackerId);
 
         if (! $definition) {



View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/c916bf6ab174d8bd0975c4e874ff7fac3c748468

-- 
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/c916bf6ab174d8bd0975c4e874ff7fac3c748468
You're receiving this email because of your account on gitlab.com. Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help

_______________________________________________
TikiWiki-cvs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-cvs
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.