You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When the Calendar folder has edit, add, review rights assigned by the folders sharing tab, users cannot edit events or move events that are not theirs in calendar view.
Found this issue in Solgema/fullcalendar/browsers/adaptor.py:
diff --git a/Solgema/fullcalendar/browser/adapters.py b/Solgema/fullcalendar/browser/adapters.py
index 189cbbb..9f7ea74 100644
--- a/Solgema/fullcalendar/browser/adapters.py
+++ b/Solgema/fullcalendar/browser/adapters.py
@@ -320,7 +320,7 @@ class SolgemaFullcalendarEditableFilter(object):
def _listSFAllowedRolesAndUsersModify(self):
sm = getSecurityManager()
user = sm.getUser()
effective_roles = user.getRoles()
effective_roles = user.getRolesInContext(self.context)
if sm.calledByExecutable():
eo = sm._context.stack[-1]
proxy_roles = getattr(eo, '_proxy_roles', None)
getRoles() method only evaluates users roles at root of site. getRolesInContext(self.context) evaluates users roles in the folder that is being read for events.
This bug means editable property of event in JS calendar is not set correctly for non logged in user unless patchted. ;-(
The text was updated successfully, but these errors were encountered:
When the Calendar folder has edit, add, review rights assigned by the folders sharing tab, users cannot edit events or move events that are not theirs in calendar view.
Found this issue in Solgema/fullcalendar/browsers/adaptor.py:
diff --git a/Solgema/fullcalendar/browser/adapters.py b/Solgema/fullcalendar/browser/adapters.py
index 189cbbb..9f7ea74 100644
--- a/Solgema/fullcalendar/browser/adapters.py
+++ b/Solgema/fullcalendar/browser/adapters.py
@@ -320,7 +320,7 @@ class SolgemaFullcalendarEditableFilter(object):
def _listSFAllowedRolesAndUsersModify(self):
sm = getSecurityManager()
user = sm.getUser()
getRoles() method only evaluates users roles at root of site. getRolesInContext(self.context) evaluates users roles in the folder that is being read for events.
This bug means editable property of event in JS calendar is not set correctly for non logged in user unless patchted. ;-(
The text was updated successfully, but these errors were encountered: