Author of an article should always be able to read (see, not write) his articles
Issue
People
Delivery
Issue
People
Delivery
Description
So, when an author makes an item, he is the creator and should be able to see in what workflow steps his article is. He does not have writing right, only reading rights.
Required changes:
integrated\content-bundle\Resources\config\solr\content.xml: only the author names are currently indexed in Solr, the ID's need to be added in a new field
ContentController in ContentBundle: allow document with the current user as author ($user->getRelation() to get the relation object from the logged in user, please note that the relation link is optional, so not all users will have this filter) to be viewed in the content overview (screenshot-1)
integrated\workflow-bundle\Security\WorkflowVoter.php --> find out if the current user is author, if so allow view (note: the Author is only available when the document is instanceof Article, other content items do not have an author field)
Deployment actions
None
Technical tasks
None
Attachments
1
Activity
Pro tip: press M to comment
Marcel
April 22, 2016 at 10:33 AM
reminder
·
Marcel
April 18, 2016 at 10:14 AM
This is an issue that is created a long time ago (in another system before it was migrated to JIRA). Would be great if we can finish this one. Can we assign it to a team?
·
Marcel
April 8, 2016 at 9:40 AM
(edited)
Test still NOK. I forgot to change the status last week, so now the status is alright again. Can you assign it?
·
Marcel
March 31, 2016 at 1:07 PM
Tested on an environment with 0.5, it does not work. SOLR is indexing it properly, but I don't see the items I (as role author) created and changed the status to editorial manager.
So, when an author makes an item, he is the creator and should be able to see in what workflow steps his article is. He does not have writing right, only reading rights.
Required changes:
integrated\content-bundle\Resources\config\solr\content.xml: only the author names are currently indexed in Solr, the ID's need to be added in a new field
ContentController in ContentBundle: allow document with the current user as author ($user->getRelation() to get the relation object from the logged in user, please note that the relation link is optional, so not all users will have this filter) to be viewed in the content overview (screenshot-1)
integrated\workflow-bundle\Security\WorkflowVoter.php --> find out if the current user is author, if so allow view (note: the Author is only available when the document is instanceof Article, other content items do not have an author field)