profileRights

[DonutsNL]

Hi,

I could realy use some help with the profileRights.

The only way i got some form of rights implemented is by actually borrowing the 'config' right and overloading the canCreate and canPurge methods (because the setup right only implements read and update). i.e

class myObject extends commonDBTM
{
    // only implements canRead, canUpdate;
    public static $rightname = 'config';        
    public static function canCreate() { return static::canUpdate(); }
    public static function canPurge() { return static::canUpdate(); }
}

So I was wondering, is there an easy way to add new item_types with default CRUD permissions to the existing profiles UI say the setup tab?

So far the only documentation i have found is about checking and adding custom permissions, not how to implement default CRUD rights on a new item_type in a way that also allows the user to 'configure' them in the default profiles menus. It always seems to require a tab to be added in which a custom form needs to be implemented. I would like to prevent the last and lean on the allready present implementation.

Thanks in advance,

[cedric-anne]

Hi,

Sorry for the late reply. I do not think there is anything yet that could permit that.

[ChrisGralike]

Hi Anne,
Thanks for the reply.

Wouldnt it be ideal if the rights are automatically generated based on normalized object properties?

This could be a nice way to normalize rights management for native GLPI objects as well as isolate the rights concern from the actual objects.

Ill use the current implementation moving forward.
rgrds,