Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Limit "maps using this layer" to maps the user has permission to see #6261

Closed
3 of 5 tasks
abulojoshua1 opened this issue Jul 14, 2020 · 0 comments
Closed
3 of 5 tasks
Assignees
Labels
enhancement security Pull requests that address a security vulnerability
Milestone

Comments

@abulojoshua1
Copy link
Contributor

abulojoshua1 commented Jul 14, 2020

Limit "maps using this layer" to maps the user has permission to see

Overview

image
The "maps using this layer" section of the layer detail page displays not only maps that the user has permission to view, but also those that the user has no permissions to view. This section ("maps using this layer") should only show maps that the user has permission to view.

Proposed By

Abulo John Joshua

Assigned to Release

This proposal is for GeoNode 3.1.0.dev1594640445.

State

  • Under Discussion
  • In Progress
  • Completed
  • Rejected
  • Deferred

Motivation

Providing a link to a map that a user does not have permissions to view will be a little bit misleading and inconveniencing to the user.

Proposal

Use user.has_perm('perm', map_object. get_self_resource()) to exclude maps that the user does not have permissions to view.

abulojoshua1 added a commit to abulojoshua1/geonode that referenced this issue Jul 14, 2020
@afabiani afabiani added enhancement security Pull requests that address a security vulnerability labels Jul 14, 2020
@afabiani afabiani added this to the 3.1 milestone Jul 14, 2020
afabiani pushed a commit that referenced this issue Jul 14, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement security Pull requests that address a security vulnerability
Projects
None yet
Development

No branches or pull requests

2 participants