LP#1410369: add a new view to restrict arbitrary editing access
authorGalen Charlton <gmc@esilibrary.com>
Thu, 19 Feb 2015 19:38:19 +0000 (19:38 +0000)
committerGalen Charlton <gmc@esilibrary.com>
Thu, 19 Feb 2015 19:42:08 +0000 (19:42 +0000)
commitd871d4c77b88393f1ad570a9ddf56f7909291e15
treed1cd97bb9931aaeb3f4ca8ed529c1d71561ae5ef
parent8d649d8a1f9df32d231b153e4c2adec2820ffd49
LP#1410369: add a new view to restrict arbitrary editing access

The previous commit now allows owning_user in fm_IDL.xml to
specify that patrons can access their own messages, saving
the need to write some copy-and-paste middle-layer code.

However, we don't necessarily want a patron who figures
out how to use pcrud directly to change the content
of messages that are sent to them.  To avoid that, this
patch adds a new view, actor.usr_message_limited, that is
allows updates of the read_date and deleted columns in
the underlying table, but nothing else.

This patch also fixes a couple typos.

Signed-off-by: Galen Charlton <gmc@esilibrary.com>
Open-ILS/examples/fm_IDL.xml
Open-ILS/src/perlmods/lib/OpenILS/WWW/EGCatLoader/Account.pm
Open-ILS/src/sql/Pg/005.schema.actors.sql
Open-ILS/src/sql/Pg/upgrade/XXXX.schema.message-center.sql