hiding fields in a find form by permission

[magazzu]

Hello,

I set permissions on some fields, using functions like this in the php file in my table:

function price__permissions(&$record){
if ( isAdmin() ) return Dataface_PermissionsTool::ALL();
return Dataface_PermissionsTool::NO_ACCESS();
}


This works, but users who are not Admin still have in their search form the fields that are not permitted.

What can I do to obtain that these forbidden fields only appear in the Admin search form? ('find' action)?

Thanks

Antonio

[shannah]

What version of Xataface are you using?

[magazzu]

Actually, I'm using librarianDB, maybe I posted in the wrong place.


The version.txt file says: 0.3.2 2530

[shannah]

Inside the dataface directory of the application there should be another version.txt file. What does it say?

[magazzu]

it's 1.3rc4 2458

[magazzu]

Hello,


The version is 1.3rc4 2458

Any hint?

Thanks

[shannah]

I believe that if you update the dataface directory to the latest (1.3.2) it should fix this issue.

[magazzu]

I believe that if you update the dataface directory to the latest (1.3.2) it should fix this issue.

Thank you.

I am not sure I know how to do it. Where do I get the new directory? How can I make the update with no risk for my application?

These questions may appear silly, but I'm really new to this.

[shannah]

rename the dataface directory to dataface-old
download xataface-1.3.2 and place it in the librariandb directory, but rename it "dataface", so that it is effectively replacing your old dataface directory.

That's it.

[magazzu]

rename the dataface directory to dataface-old
download xataface-1.3.2 and place it in the librariandb directory, but rename it "dataface", so that it is effectively replacing your old dataface directory.

That's it.

Thanks.

Successfully done. But my problem remains: The "find" action shows also the fields that I want to hide to common users. Sigh.

Is there another way to hide fields, leaving them visible to admin?

[shannah]

In the init() method of the table delegate class, you could conditionally make them hidden.
e.g.

Code: Select all

function init(Dataface_Table $table){
    if ( !isAdmin() ){
        $myfield =& $table->getField('myfield');
        $myfield['visibility']['find'] = 'hidden';
    }

    // etc...
}


NOTE: isAdmin() doesn't exist. YOu need to create a function like that yourself.

[magazzu]

YES, this works!

Thank you very much.

Antonio