[TikiWiki-commits] [Git][tikiwiki/tiki][29.x] [BP][FIX] Tracker Controller: Update permission check for admin trackers to use...

ushindi bienvenu pushed to branch 29.x at Tiki Wiki CMS Groupware / Tiki


Commits:
e492a759 by UshindiG at 2026-06-12T06:24:23+00:00
[BP][FIX] Tracker Controller: Update permission check for admin trackers to use...
---
* [FIX] Tracker Controller: Update permission check for admin trackers to use...
---
* [FIX] Tracker Controller: Update permission check for admin trackers to use...
---
* [FIX] Tracker Controller: Update permission check for admin trackers to use specific tracker permissions

See merge request tikiwiki/tiki!10235

(cherry picked from commit c916bf6ab174d8bd0975c4e874ff7fac3c748468)

See merge request tikiwiki/tiki!10496

(cherry picked from commit 48ca025871b304e9fccf6bd1bfa3af406a7fb486)

See merge request tikiwiki/tiki!10499

- - - - -


1 changed file:

- lib/core/Services/Tracker/Controller.php


Changes:

=====================================
lib/core/Services/Tracker/Controller.php
=====================================
@@ -727,11 +727,6 @@ class Services_Tracker_Controller
     {
         // TODO : Eventually, this method should filter according to the actual permissions, but because
         //        it is only to be used for tracker sync at this time, admin privileges are just fine.
-
-        if (! Perms::get()->admin_trackers) {
-            throw new Services_Exception_Denied(tr('Reserved for tracker administrators'));
-        }
-
         $trackerId = $input->trackerId->int();
         $offset = $input->offset->int();
         $maxRecords = $input->maxRecords->int();
@@ -739,6 +734,11 @@ class Services_Tracker_Controller
         $format = $input->format->word();
         $modifiedSince = $input->modifiedSince->int();
 
+        $perms = Perms::get('tracker', $trackerId);
+        if (! $perms->admin_trackers) {
+            throw new Services_Exception_Denied(tr('Reserved for tracker administrators'));
+        }
+
         $definition = Tracker_Definition::get($trackerId);
 
         if (! $definition) {



View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/e492a759919739127929a019fe8fac41d3598bed

-- 
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/e492a759919739127929a019fe8fac41d3598bed
You're receiving this email because of your account on gitlab.com. Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help

_______________________________________________
TikiWiki-cvs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-cvs