Skip to content
Snippets Groups Projects
  1. Jun 24, 2015
  2. Jun 23, 2015
  3. Jun 21, 2015
    • PavelBegunkov's avatar
      another bunch of fixes (see below) · c87cb477
      PavelBegunkov authored
      1) fix Rating Model
      2) sql CreateSubject: restore expected behavior (see todo in commit "Refactoring of subjects upload page" 19.06.15)
      3) refactor and disable JavaAuth (see todo)
      c87cb477
  4. Jun 19, 2015
  5. Jun 16, 2015
  6. Jun 15, 2015
  7. Jun 14, 2015
  8. Jun 13, 2015
    • PavelBegunkov's avatar
      delete page_access from db · 3e8531b0
      PavelBegunkov authored
      3e8531b0
    • xamgore's avatar
      Explicit user rights management · 248dfda3
      xamgore authored
      It may seem that this commit is rather big, but it's not. Don't be afraid, just read the message. Recently we have understood that it was a bad idea to store rights for pages in a database. So I decided to move the information to PHP layer and make it more clear.
      
      When you write a new controller in Admin/ Dean/ Student/ folder, you should explicitly extend one of Controller_Environment_* classes, and all specific checks will be done there. Additional advantage is manipulating $user variable, so you will have access to extended fields of user, ie User_Student contains StudentID, but User_Teacher does not.
      
      Also, prefer -> operator to []. The reason is simple: IDE shows hints and mismatches only with the first one.
      
      The second important statement is User::checkAccess(User::RIGHTS_*) — call it at the top of *every* function in the Handler/ classes. Exception will be thrown, if user doesn't have enough rights.
      
      NB. If you want to overload "before()" function while extending E...
      248dfda3
    • xamgore's avatar
      Removed errMessages file · 8cc1ed15
      xamgore authored
      8cc1ed15
  9. Jun 12, 2015
  10. Jun 11, 2015