making object specific perm calls by default

git-svn-id: svn://svn.open-ils.org/ILS/branches/acq-experiment@8687 dcc99617-32d9-48b4-a31d-7c20da2025e4

diff --git a/Open-ILS/src/perlmods/OpenILS/Application/Acq/Provider.pm b/Open-ILS/src/perlmods/OpenILS/Application/Acq/Provider.pm
index c8145dc..291f992 100644 (file)
--- a/Open-ILS/src/perlmods/OpenILS/Application/Acq/Provider.pm
+++ b/Open-ILS/src/perlmods/OpenILS/Application/Acq/Provider.pm
@@ -31,7 +31,7 @@ sub create_provider {
     my($self, $conn, $auth, $provider) = @_;
     my $e = new_editor(authtoken=>$auth, xact=>1);
     return $e->die_event unless $e->checkauth;
-    return $e->die_event unless $e->allowed('CREATE_PROVIDER', $provider->owner);
+    return $e->die_event unless $e->allowed('CREATE_PROVIDER', $provider->owner, $provider);
     $e->create_acq_provider($provider) or return $e->die_event;
     $e->commit;
     return $provider->id;
@@ -57,7 +57,7 @@ sub retrieve_provider {
     my $e = new_editor(authtoken=>$auth);
     return $e->event unless $e->checkauth;
     my $provider = $e->retrieve_acq_provider($provider_id) or return $e->event;
-    return $e->event unless $e->allowed('VIEW_PROVIDER', $provider->owner);
+    return $e->event unless $e->allowed('VIEW_PROVIDER', $provider->owner, $provider);
     return $provider;
 }