Remove retrieve permissions from org units
authorBen Shum <bshum@biblio.org>
Tue, 24 Jul 2012 14:36:49 +0000 (10:36 -0400)
committerLebbeous Fogle-Weekley <lebbeous@esilibrary.com>
Tue, 24 Jul 2012 15:17:27 +0000 (11:17 -0400)
Noticeably broken for the new simplified pull list when org units were not
visible from the interface to users without the following permissions:

CREATE_ORG_UNIT
UPDATE_ORG_UNIT
DELETE_ORG_UNIT

Since regular staff accounts would never be given any of these permissions
and nothing really secretive is included in org unit lookup, this change
removes those permissionas being required for retrieve.

Signed-off-by: Ben Shum <bshum@biblio.org>
Signed-off-by: Lebbeous Fogle-Weekley <lebbeous@esilibrary.com>

Open-ILS/examples/fm_IDL.xml

index a603348..780751f 100644 (file)
@@ -5278,10 +5278,7 @@ SELECT  usr,
         <permacrud xmlns="http://open-ils.org/spec/opensrf/IDL/permacrud/v1">
             <actions>
                 <create permission="CREATE_ORG_UNIT" context_field="parent_ou"/>
-                <retrieve permission="CREATE_ORG_UNIT UPDATE_ORG_UNIT DELETE_ORG_UNIT">
-                    <context field="id"/>
-                    <context field="parent_ou"/>
-                               </retrieve>
+                <retrieve />
                 <update permission="UPDATE_ORG_UNIT" context_field="id"/>
                 <delete permission="DELETE_ORG_UNIT" context_field="parent_ou"/>
             </actions>