#733 Permission exemption check doesn't reach childs - Hobo

Type	To find
responsible:me	tickets assigned to you
tagged:"@high"	tickets tagged @high
milestone:next	tickets in the upcoming milestone
state:invalid	tickets with the state invalid
created:"last week"	tickets created last week
sort:number, importance, updated	tickets sorted by #, importance or updated
Combine keywords for powerful searching.
Use advanced searching »

#733 open

Permission exemption check doesn't reach childs

Reported by Betelgeuse | May 30th, 2010 @ 11:18 PM | in Hobo 1.4

Situation:

You build child records with o.childs.build inside a transition
You call save on the parent

What happens:

permissions are fired

Looking at Hobo code there's:

    def permission_check_required?
      # Lifecycle steps are exempt from permission checks
      acting_user && !(self.class.has_lifecycle? && lifecycle.active_step)
    end

This leads me to believe that they should not be fired for the child record either. acting_user is set in the child but the child has no lifecycles in my case.

(rdb:1) p acting_user && !(self.class.has_lifecycle? && lifecycle.active_step)
true
(rdb:1) p self.class.has_lifecycle?
nil

Comments and changes to this ticket

You flagged this item as spam.
Betelgeuse May 31st, 2010 @ 12:13 AM
Probably duplicate of #596
Matt Jones September 14th, 2011 @ 10:37 PM
- State changed from “new” to “open”
- Milestone set to “Hobo 1.4”
- Milestone order changed from “0” to “0”

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.