Add Read and Update Owned Rights

glpi-project · Apr 26, 2024 · 02745f3 · 02745f3
1 parent c34bda6
commit 02745f3
Show file tree

Hide file tree

Showing 24 changed files with 128 additions and 67 deletions.
diff --git a/front/asset/asset.form.php b/front/asset/asset.form.php
@@ -60,7 +60,7 @@
     Response::sendError(400, 'Bad request', Response::CONTENT_TYPE_TEXT_HTML);
 }
 
-Session::checkRightsOr($asset::$rightname, [READ, READ_ASSIGNED]);
+Session::checkRightsOr($asset::$rightname, [READ, READ_ASSIGNED, READ_OWNED]);
 
 if (isset($_POST['add'])) {
     $asset->check(-1, CREATE, $_POST);

diff --git a/front/asset/asset.php b/front/asset/asset.php
@@ -48,7 +48,7 @@
     Response::sendError(400, 'Bad request', Response::CONTENT_TYPE_TEXT_HTML);
 }
 
-Session::checkRightsOr($classname::$rightname, [READ, READ_ASSIGNED]);
+Session::checkRightsOr($classname::$rightname, [READ, READ_ASSIGNED, READ_OWNED]);
 
 Html::header($classname::getTypeName(Session::getPluralNumber()), $_SERVER['PHP_SELF'], 'assets', $classname);
 

diff --git a/front/cartridgeitem.php b/front/cartridgeitem.php
@@ -35,7 +35,7 @@
 
 include('../inc/includes.php');
 
-Session::checkRightsOr(Cartridge::$rightname, [READ, READ_ASSIGNED]);
+Session::checkRightsOr(Cartridge::$rightname, [READ, READ_ASSIGNED, READ_OWNED]);
 
 Html::header(Cartridge::getTypeName(Session::getPluralNumber()), $_SERVER['PHP_SELF'], "assets", "cartridgeitem");
 

diff --git a/front/computer.form.php b/front/computer.form.php
@@ -37,7 +37,7 @@
 
 include('../inc/includes.php');
 
-Session::checkRightsOr(Computer::$rightname, [READ, READ_ASSIGNED]);
+Session::checkRightsOr(Computer::$rightname, [READ, READ_ASSIGNED, READ_OWNED]);
 
 if (!isset($_GET["id"])) {
     $_GET["id"] = "";

diff --git a/front/computer.php b/front/computer.php
@@ -35,7 +35,7 @@
 
 include('../inc/includes.php');
 
-Session::checkRightsOr(Computer::$rightname, [READ, READ_ASSIGNED]);
+Session::checkRightsOr(Computer::$rightname, [READ, READ_ASSIGNED, READ_OWNED]);
 
 Html::header(Computer::getTypeName(Session::getPluralNumber()), $_SERVER['PHP_SELF'], "assets", "computer");
 

diff --git a/front/consumableitem.php b/front/consumableitem.php
@@ -35,7 +35,7 @@
 
 include('../inc/includes.php');
 
-Session::checkRightsOr(Consumable::$rightname, [READ, READ_ASSIGNED]);
+Session::checkRightsOr(Consumable::$rightname, [READ, READ_ASSIGNED, READ_OWNED]);
 
 Html::header(Consumable::getTypeName(Session::getPluralNumber()), $_SERVER['PHP_SELF'], "assets", "consumableitem");
 

diff --git a/front/monitor.form.php b/front/monitor.form.php
@@ -38,7 +38,7 @@
 
 include('../inc/includes.php');
 
-Session::checkRightsOr(Monitor::$rightname, [READ, READ_ASSIGNED]);
+Session::checkRightsOr(Monitor::$rightname, [READ, READ_ASSIGNED, READ_OWNED]);
 
 if (empty($_GET["id"])) {
     $_GET["id"] = "";

diff --git a/front/monitor.php b/front/monitor.php
@@ -35,7 +35,7 @@
 
 include('../inc/includes.php');
 
-Session::checkRightsOr(Monitor::$rightname, [READ, READ_ASSIGNED]);
+Session::checkRightsOr(Monitor::$rightname, [READ, READ_ASSIGNED, READ_OWNED]);
 
 Html::header(Monitor::getTypeName(Session::getPluralNumber()), $_SERVER['PHP_SELF'], "assets", "monitor");
 

diff --git a/front/networkequipment.form.php b/front/networkequipment.form.php
@@ -37,7 +37,7 @@
 
 include('../inc/includes.php');
 
-Session::checkRightsOr(NetworkEquipment::$rightname, [READ, READ_ASSIGNED]);
+Session::checkRightsOr(NetworkEquipment::$rightname, [READ, READ_ASSIGNED, READ_OWNED]);
 
 if (!isset($_GET["id"])) {
     $_GET["id"] = "";

diff --git a/front/networkequipment.php b/front/networkequipment.php
@@ -35,7 +35,7 @@
 
 include('../inc/includes.php');
 
-Session::checkRightsOr(NetworkEquipment::$rightname, [READ, READ_ASSIGNED]);
+Session::checkRightsOr(NetworkEquipment::$rightname, [READ, READ_ASSIGNED, READ_OWNED]);
 
 Html::header(NetworkEquipment::getTypeName(Session::getPluralNumber()), $_SERVER['PHP_SELF'], "assets", "networkequipment");
 

diff --git a/front/peripheral.form.php b/front/peripheral.form.php
@@ -38,7 +38,7 @@
 
 include('../inc/includes.php');
 
-Session::checkRightsOr(Peripheral::$rightname, [READ, READ_ASSIGNED]);
+Session::checkRightsOr(Peripheral::$rightname, [READ, READ_ASSIGNED, READ_OWNED]);
 
 if (empty($_GET["id"])) {
     $_GET["id"] = "";

diff --git a/front/peripheral.php b/front/peripheral.php
@@ -35,7 +35,7 @@
 
 include('../inc/includes.php');
 
-Session::checkRightsOr(Peripheral::$rightname, [READ, READ_ASSIGNED]);
+Session::checkRightsOr(Peripheral::$rightname, [READ, READ_ASSIGNED, READ_OWNED]);
 
 Html::header(Peripheral::getTypeName(Session::getPluralNumber()), $_SERVER['PHP_SELF'], "assets", "peripheral");
 

diff --git a/front/phone.form.php b/front/phone.form.php
@@ -38,7 +38,7 @@
 
 include('../inc/includes.php');
 
-Session::checkRightsOr(Phone::$rightname, [READ, READ_ASSIGNED]);
+Session::checkRightsOr(Phone::$rightname, [READ, READ_ASSIGNED, READ_OWNED]);
 
 if (empty($_GET["id"])) {
     $_GET["id"] = "";

diff --git a/front/phone.php b/front/phone.php
@@ -35,7 +35,7 @@
 
 include('../inc/includes.php');
 
-Session::checkRightsOr(Phone::$rightname, [READ, READ_ASSIGNED]);
+Session::checkRightsOr(Phone::$rightname, [READ, READ_ASSIGNED, READ_OWNED]);
 
 Html::header(Phone::getTypeName(Session::getPluralNumber()), $_SERVER['PHP_SELF'], 'assets', 'phone');
 

diff --git a/front/printer.form.php b/front/printer.form.php
@@ -38,7 +38,7 @@
 
 include('../inc/includes.php');
 
-Session::checkRightsOr(Printer::$rightname, [READ, READ_ASSIGNED]);
+Session::checkRightsOr(Printer::$rightname, [READ, READ_ASSIGNED, READ_OWNED]);
 
 if (!isset($_GET["id"])) {
     $_GET["id"] = "";

diff --git a/front/printer.php b/front/printer.php
@@ -35,7 +35,7 @@
 
 include('../inc/includes.php');
 
-Session::checkRightsOr(Printer::$rightname, [READ, READ_ASSIGNED]);
+Session::checkRightsOr(Printer::$rightname, [READ, READ_ASSIGNED, READ_OWNED]);
 
 Html::header(Printer::getTypeName(Session::getPluralNumber()), $_SERVER['PHP_SELF'], "assets", "printer");
 

diff --git a/front/software.form.php b/front/software.form.php
@@ -37,7 +37,7 @@
 
 include('../inc/includes.php');
 
-Session::checkRightsOr(Software::$rightname, [READ, READ_ASSIGNED]);
+Session::checkRightsOr(Software::$rightname, [READ, READ_ASSIGNED, READ_OWNED]);
 
 if (!isset($_GET["id"])) {
     $_GET["id"] = "";

diff --git a/front/software.php b/front/software.php
@@ -35,7 +35,7 @@
 
 include('../inc/includes.php');
 
-Session::checkRightsOr(Software::$rightname, [READ, READ_ASSIGNED]);
+Session::checkRightsOr(Software::$rightname, [READ, READ_ASSIGNED, READ_OWNED]);
 
 Html::header(Software::getTypeName(Session::getPluralNumber()), $_SERVER['PHP_SELF'], "assets", "software");
 

diff --git a/inc/define.php b/inc/define.php
@@ -68,6 +68,8 @@
 define("UNLOCK", 128);
 define("READ_ASSIGNED", 256);
 define("UPDATE_ASSIGNED", 512);
+define("READ_OWNED", 1024);
+define("UPDATE_OWNED", 2048);
 
 // set the default app_name
 $CFG_GLPI['app_name'] = 'GLPI';