MTrackWeb/Roo.php

[web.mtrack] / MTrackWeb / Roo.php

diff --git a/MTrackWeb/Roo.php b/MTrackWeb/Roo.php
index c84c965..82155ab 100644 (file)
--- a/MTrackWeb/Roo.php
+++ b/MTrackWeb/Roo.php
@@ -20,11 +20,11 @@ class MTrackWeb_Roo extends Pman_Roo
         'Mtrack_ticket', /// all of these MUST have applyFilters, and check authenication..
         'mtrack_change',
         'core_enum',
-        'Person',
+        //'Person',  // fixme - need to verify this is protected..
         'mtrack_milestone',
-        'Projects',
-        'Images',
-        'mtrack_repos'
+        'Projects',  // fixme - we should remove code from projects....
+        'Images',   // not sure about this...
+        'mtrack_repos'   // not sure about this...
         
     );
     
@@ -48,20 +48,20 @@ class MTrackWeb_Roo extends Pman_Roo
     
     function checkPerm($obj, $lvl, $req=null)
     {
-        
-        $res = parent::checkPerm($obj,$lvl,$req);
-        if ($res) {
-            return $res;
-        }
-        
-        
-        if ($this->authUser && $this->authUser->company()->comptype == 'OWNER') {
-            return true;
-        }
+        //if ($this->authUser) {
+            $res = parent::checkPerm($obj,$lvl,$req);
+            
+            if ($res) {
+                return $res;
+            }
+        //}
+        // not authenticated...
+         
         // these checks only apply to non-company users.
         
         // normally allowed, but we have more restrictions...
         switch($obj->tablename()) {
+            
             case 'core_enum':
                 if (empty($req['etype'])) {
                     return false;
@@ -71,9 +71,8 @@ class MTrackWeb_Roo extends Pman_Roo
                 }
                 
                 switch ($req['etype']) {
-                   // case 'severity':
-                    case 'classification':
-                    case 'severity':
+                     case 'classification':
+                    //case 'severity':
                     case 'resolution':
                     case 'priority':
                     case 'ticketstate':                    
@@ -81,9 +80,11 @@ class MTrackWeb_Roo extends Pman_Roo
                     
                     // not a member of the company..
                     // not allowed in..
-                    return true;
+                        return true;
+                    default:
+                        return false;
                 }
-                return false;
+                break; // should not get here...
             
             default:
                 return false;
@@ -92,7 +93,19 @@ class MTrackWeb_Roo extends Pman_Roo
             
         }
         
+    }
+    
+    function setFilters($x, $q) {
+        $ret = parent::setFilters($x,$q);
+        
+        
+        
         
         
+        
+        
+        
+        return $ret;
     }
+    
 }