Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-21438

Improve relation permission handling to use view_embed

    XMLWordPrintable

Details

    Description

      With the introduction security fix to not show relations, it is now required to make Media library readable.
      However it should instead use view_embed like done in xmltext field type, see:

      if ( $object->attribute( 'can_read' ) ||
     $object->attribute( 'can_view_embed' ) )
{
    $templateName = $element->nodeName . $tplSuffix;
}
else
{
    $templateName = $element->nodeName . '_denied';
}

      Attachments

        Activity

          People

            Unassigned Unassigned
            andre.romcke-obsolete@ez.no André Rømcke (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            15 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 1 week, 7 hours, 50 minutes
                1w 7h 50m