From 83ad4e4448008590aaec968bee9fd395cc5dc4af Mon Sep 17 00:00:00 2001 From: Frederic Guillot Date: Thu, 26 Jan 2017 22:26:07 -0500 Subject: Set API methods getColumns and getColumn accessible to project viewers --- app/ServiceProvider/AuthenticationProvider.php | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'app/ServiceProvider') diff --git a/app/ServiceProvider/AuthenticationProvider.php b/app/ServiceProvider/AuthenticationProvider.php index d953705d..3c04ff61 100644 --- a/app/ServiceProvider/AuthenticationProvider.php +++ b/app/ServiceProvider/AuthenticationProvider.php @@ -198,7 +198,8 @@ class AuthenticationProvider implements ServiceProviderInterface $acl->add('ActionProcedure', array('removeAction', 'getActions', 'createAction'), Role::PROJECT_MANAGER); $acl->add('CategoryProcedure', '*', Role::PROJECT_MANAGER); - $acl->add('ColumnProcedure', '*', Role::PROJECT_MANAGER); + $acl->add('ColumnProcedure', array('updateColumn', 'addColumn', 'removeColumn', 'changeColumnPosition'), Role::PROJECT_MANAGER); + $acl->add('ColumnProcedure', array('getColumns', 'getColumn'), Role::PROJECT_VIEWER); $acl->add('CommentProcedure', array('removeComment', 'createComment', 'updateComment'), Role::PROJECT_MEMBER); $acl->add('ProjectPermissionProcedure', '*', Role::PROJECT_MANAGER); $acl->add('ProjectProcedure', array('updateProject', 'removeProject', 'enableProject', 'disableProject', 'enableProjectPublicAccess', 'disableProjectPublicAccess'), Role::PROJECT_MANAGER); -- cgit v1.2.3