#7034 (Simple users in Seggi cannot see detail of other users)

by Luc Saffre · in Developers · assigned to Luc Saffre

Résumé

A user in Seggi can see their friends, but cannot click on the detail link of another user.

Solution was to define a User.get_detail_action() method. Side effects:

Rename UsersOverview to ListedUsers
Replace AllUsers by Users (the difference between was just historical)
Make ListedUsers visible to anonymous only when is_demo_site is True.

This is useful for most other applications as well. The UsersOverview table, until now, was not used (except for showing the users on a demo site for anonymous).

Concepts sous-jacents

Commentaires

2 semaines, 2 jours ago by Luc Saffre about #7034 (Simple users in Seggi cannot see detail of other users) : Uff! All test suites are passing again. I will now push my changes (in ca 14 repositories).
2 semaines, 2 jours ago by Luc Saffre about #7034 (Simple users in Seggi cannot see detail of other users) : I'm at ce 30 test failures left. It's a lot of work, but I see only confirmations for this change.
2 semaines, 3 jours ago by Luc Saffre about #7034 (Simple users in Seggi cannot see detail of other users) : todo: in docs/dev/watch.rst the owner is clickable while the master is't. Strange.
2 semaines, 4 jours ago by Luc Saffre in reply to Luc Saffre about #7034 (Simple users in Seggi cannot see detail of other users) : This is a lot of work and no customer would pay for it, but it increases the quality and the code coverage of Lino.
2 semaines, 4 jours ago by Luc Saffre about #7034 (Simple users in Seggi cannot see detail of other users) (1 reply) : I'm working through 122 doctest failures in book.
2 semaines, 4 jours ago by Luc Saffre about #7034 (Simple users in Seggi cannot see detail of other users) : todo: After my local changes, GFK fields are either no longer clickable, or rt.show() doesn't render them as such. For example in docs/apps/noi/invoicing.rst I have this:
-==================== ============================================ ========= =========== ==== ============ ==================...
2 semaines, 4 jours ago by Luc Saffre about #7034 (Simple users in Seggi cannot see detail of other users) : I'll probably have a lot of changes because ActionRequest.show() now checks whether the user has permission.
2 semaines, 5 jours ago by Luc Saffre about #7034 (Simple users in Seggi cannot see detail of other users) : todo: add the friends plugin to chatter and write doctests to add coverage. Select a demo project that does NOT set is_demo_site to True and verify whether SharedUsers is refused to anonymous.
2 semaines, 5 jours ago by Luc Saffre about #7034 (Simple users in Seggi cannot see detail of other users) : Created new Ticket #7034 (Simple users in Seggi cannot see detail of other users).