Author of an article should always be able to read (see, not write) his articles

Description

So, when an author makes an item, he is the creator and should be able to see in what workflow steps his article is. He does not have writing right, only reading rights.

Required changes:

  • integrated\content-bundle\Resources\config\solr\content.xml: only the author names are currently indexed in Solr, the ID's need to be added in a new field

  • ContentController in ContentBundle: allow document with the current user as author ($user->getRelation() to get the relation object from the logged in user, please note that the relation link is optional, so not all users will have this filter) to be viewed in the content overview (screenshot-1)

  • integrated\workflow-bundle\Security\WorkflowVoter.php --> find out if the current user is author, if so allow view (note: the Author is only available when the document is instanceof Article, other content items do not have an author field)

Technical tasks

None

Deployment actions

None

Activity

Show:
Marcel
March 31, 2016, 1:07 PM

Tested on an environment with 0.5, it does not work. SOLR is indexing it properly, but I don't see the items I (as role author) created and changed the status to editorial manager.

Marcel
April 8, 2016, 9:40 AM
Edited

Test still NOK. I forgot to change the status last week, so now the status is alright again. Can you assign it?

Marcel
April 18, 2016, 10:14 AM

This is an issue that is created a long time ago (in another system before it was migrated to JIRA). Would be great if we can finish this one. Can we assign it to a team?

Marcel
April 22, 2016, 10:33 AM

reminder

Assignee

Unassigned

Client

Marijn Otte

Fix versions

Configure