TACTIC Open Source
Access rules for edit, delete notes? - Printable Version

+- TACTIC Open Source (http://forum.southpawtech.com)
+-- Forum: TACTIC Open Source (http://forum.southpawtech.com/forumdisplay.php?fid=3)
+--- Forum: TACTIC Discussion (http://forum.southpawtech.com/forumdisplay.php?fid=4)
+--- Thread: Access rules for edit, delete notes? (/showthread.php?tid=62)



Access rules for edit, delete notes? - jerlyn06 - 12-20-2019

hello all, 

We have configured a MyTasks for our artists which includes a column containing notes on their tasks as well as the notes on the dependency tasks. This has resulted in artist A being able to edit or delete notes of artist B. (screenshot attached)

Is there a way to restrict artist A from editing or deleting notes added by them?

[Image: grCQZPv]

(https://ibb.co/grCQZPv)


RE: Access rules for edit, delete notes? - listy - 12-21-2019

I guess it is not possible from the ui.
But nothing can stop You from edit source codes of discussion widget.
Looks like You on the 4.5 or lower version.

src/pyasm/widget/discussion_wdg.py

Method: get_note_menu
You should add some custom security rules, and add security checks
Example:
#<rule group="project" code="*" access="allow"/>
security = Environment.get_security()
key = { "code": "*" }
if security.check_access("project", key, "allow", default="deny"):
etc...