Uploaded image for project: 'Isis'
  1. Isis
  2. ISIS-1044

Table counts and gmap3/fullcalendar2 do not honour any vetoing, eg by subscribers or WithApplicationTenancy

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: viewer-wicket-1.7.0
    • Fix Version/s: 1.10.0
    • Component/s: Core
    • Labels:
      None

      Description

      Suppose that the Isis addon security module is being used with application tenancy checking; this means that the Wicket table (CollectionContentsAsAjaxTable) will only show rows for those entities for which the user is authorized (the visibility has not been vetoed).

      However, the underlying EntityCollectionModel does contain those objects, and the size of that collection is what is shown in the "showing 1-5 of 15" totals etc rendered at the bottom of the table.

      So the question is: how to ensure that figure is correct?

      • One option is to eagerly check the visibility of every item (even those not on the current page).
      • Another option is to suppress the totals, somehow (would require additional metadata, along with a worse UI for users

      ~~~
      Related: the gmap3/fullcalendar2/excel Isis addons do not check for the object visibility, meaning that they expose information when they should not.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              danhaywood Dan Haywood
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: