can_create and permissions

Next topic

Author	Message
BJørnar Trondsen	Thursday 17 August 2006 11:53:34 am I have 2 users: One user has create permission to a certain class. The other one has create permission to all classes. When displaying a NewButton which creates a new object that one of the user has permission to create, while the other user has not, the NewButton is display even though a user hasn't got access to create an object of a that specific class. I only want to have the NewButton displayed for the user having the correct permission. Here's the output for the user 1: can_read boolean true can_create boolean true can_edit boolean false can_hide boolean false can_remove boolean false can_move boolean false can_move_from boolean false can_add_location boolean false can_remove_location boolean false can_view_embed boolean false is_main boolean true Output for ouser 2: can_read boolean true can_create boolean true can_edit boolean false can_hide boolean false can_remove boolean false can_move boolean false can_move_from boolean false can_add_location boolean false can_remove_location boolean false can_view_embed boolean false is_main boolean true This are all the same. Here's my code: {section show=$node.object.can_create} <form method="post" action={"/content/action"\|ezurl}> <input type="hidden" name="NodeID" value="{$node.node_id}" /> <input type="hidden" name="ClassID" value="24" /> <input type="hidden" name="ContentLanguageCode" value="eng-US" /> <input class="button" type="submit" name="NewButton" value="{'Upload Document'\|i18n('design/standard/node/view')}" /> </form> {/section} Of course, when I log in with the user not having the permission and hit the NewButton, I get an access error (while it works for the user having the correct permission). How can I have the NewButton displayed only for the user having the permission to create an object?
Marcin Drozd	Thursday 17 August 2006 1:26:52 pm Hi Did U try to disable cache for this template? Put first line in your tpl: {set-block scope=root variable=cache_ttl}0{/set-block} or maybe try with: http://ez.no/doc/ez_publish/technical_manual/3_8/reference/modules/content/fetch_functions/access http://ez.no/doc/ez_publish/technical_manual/3_8/reference/modules/content/fetch_functions/can_instantiate_classes http://ez.no/doc/ez_publish/technical_manual/3_8/reference/modules/content/fetch_functions/can_instantiate_class_list http://ez.no/doc/ez_publish/technical_manual/3_8/reference/modules/user/fetch_functions/has_access_to http://ez-publish.pl

Author

Message

Thursday 17 August 2006 11:53:34 am

I have 2 users: One user has create permission to a certain class. The other one has create permission to all classes.

When displaying a NewButton which creates a new object that one of the user has permission to create, while the other user has not, the NewButton is display even though a user hasn't got access to create an object of a that specific class.
I only want to have the NewButton displayed for the user having the correct permission.

Here's the output for the user 1:
can_read boolean true
can_create boolean true
can_edit boolean false
can_hide boolean false
can_remove boolean false
can_move boolean false
can_move_from boolean false
can_add_location boolean false
can_remove_location boolean false
can_view_embed boolean false
is_main boolean true

Output for ouser 2:
can_read boolean true
can_create boolean true
can_edit boolean false
can_hide boolean false
can_remove boolean false
can_move boolean false
can_move_from boolean false
can_add_location boolean false
can_remove_location boolean false
can_view_embed boolean false
is_main boolean true

This are all the same.

Here's my code:
{section show=$node.object.can_create}
<form method="post" action={"/content/action"|ezurl}>
<input type="hidden" name="NodeID" value="{$node.node_id}" />
<input type="hidden" name="ClassID" value="24" />
<input type="hidden" name="ContentLanguageCode" value="eng-US" />
<input class="button" type="submit" name="NewButton" value="{'Upload Document'|i18n('design/standard/node/view')}" />
</form>
{/section}

Of course, when I log in with the user not having the permission and hit the NewButton, I get an access error (while it works for the user having the correct permission).

How can I have the NewButton displayed only for the user having the permission to create an object?

Marcin Drozd

Thursday 17 August 2006 1:26:52 pm

Hi
Did U try to disable cache for this template?
Put first line in your tpl: {set-block scope=root variable=cache_ttl}0{/set-block}
or maybe try with:
http://ez.no/doc/ez_publish/technical_manual/3_8/reference/modules/content/fetch_functions/access
http://ez.no/doc/ez_publish/technical_manual/3_8/reference/modules/content/fetch_functions/can_instantiate_classes
http://ez.no/doc/ez_publish/technical_manual/3_8/reference/modules/content/fetch_functions/can_instantiate_class_list
http://ez.no/doc/ez_publish/technical_manual/3_8/reference/modules/user/fetch_functions/has_access_to

http://ez-publish.pl

eZ debug

Timing:	Jan 18 2025 22:31:10
Script start
Timing:	Jan 18 2025 22:31:10
Module start 'layout'
Timing:	Jan 18 2025 22:31:10
Module start 'content'
Timing:	Jan 18 2025 22:31:11
Module end 'content'
Timing:	Jan 18 2025 22:31:11
Script end

Main resources:

Total runtime	0.5611 sec
Peak memory usage	4,096.0000 KB
Database Queries	54

Timing points:

Checkpoint	Start (sec)	Duration (sec)	Memory at start (KB)	Memory used (KB)
Script start	0.0000	0.0073	587.9141	152.6250
Module start 'layout'	0.0073	0.0027	740.5391	39.4453
Module start 'content'	0.0100	0.5495	779.9844	499.9219
Module end 'content'	0.5595	0.0015	1,279.9063	12.1641
Script end	0.5610		1,292.0703

Time accumulators:

Accumulator	Duration (sec)	Duration (%)	Count	Average (sec)
Ini load
Load cache	0.0039	0.7026	16	0.0002
Check MTime	0.0014	0.2464	16	0.0001
Mysql Total
Database connection	0.0010	0.1854	1	0.0010
Mysqli_queries	0.5072	90.4066	54	0.0094
Looping result	0.0005	0.0874	52	0.0000
Template Total	0.5307	94.6	2	0.2653
Template load	0.0022	0.3937	2	0.0011
Template processing	0.5284	94.1846	2	0.2642
Template load and register function	0.0002	0.0369	1	0.0002
states
state_id_array	0.0009	0.1577	1	0.0009
state_identifier_array	0.0007	0.1212	2	0.0003
Override
Cache load	0.0019	0.3352	51	0.0000
Sytem overhead
Fetch class attribute can translate value	0.0007	0.1255	2	0.0004
Fetch class attribute name	0.0014	0.2529	2	0.0007
XML
Image XML parsing	0.0002	0.0442	2	0.0001
class_abstraction
Instantiating content class attribute	0.0000	0.0023	2	0.0000
General
dbfile	0.0008	0.1444	10	0.0001
String conversion	0.0000	0.0014	4	0.0000
Note: percentages do not add up to 100% because some accumulators overlap

Templates used to render the page:

Usage	Requested template	Template	Template loaded
1	node/view/full.tpl	full/forum_topic.tpl	extension/sevenx/design/simple/override/templates/full/forum_topic.tpl
2	content/datatype/view/ezxmltext.tpl	<No override>	extension/community_design/design/suncana/templates/content/datatype/view/ezxmltext.tpl
6	content/datatype/view/ezxmltags/paragraph.tpl	<No override>	extension/ezwebin/design/ezwebin/templates/content/datatype/view/ezxmltags/paragraph.tpl
5	content/datatype/view/ezxmltags/line.tpl	<No override>	design/standard/templates/content/datatype/view/ezxmltags/line.tpl
1	print_pagelayout.tpl	<No override>	extension/community/design/community/templates/print_pagelayout.tpl
Number of times templates used: 15 Number of unique templates used: 5

Time used to render debug report: 0.0001 secs