From: erickson Date: Thu, 7 Feb 2008 17:39:22 +0000 (+0000) Subject: making object specific perm calls by default X-Git-Url: https://old-git.evergreen-ils.org/?a=commitdiff_plain;h=386cab5334bd355bae2faade427c27be01e15e75;p=Evergreen.git making object specific perm calls by default git-svn-id: svn://svn.open-ils.org/ILS/branches/acq-experiment@8687 dcc99617-32d9-48b4-a31d-7c20da2025e4 --- diff --git a/Open-ILS/src/perlmods/OpenILS/Application/Acq/Provider.pm b/Open-ILS/src/perlmods/OpenILS/Application/Acq/Provider.pm index c8145dcf3a..291f9922d6 100644 --- a/Open-ILS/src/perlmods/OpenILS/Application/Acq/Provider.pm +++ b/Open-ILS/src/perlmods/OpenILS/Application/Acq/Provider.pm @@ -31,7 +31,7 @@ sub create_provider { my($self, $conn, $auth, $provider) = @_; my $e = new_editor(authtoken=>$auth, xact=>1); return $e->die_event unless $e->checkauth; - return $e->die_event unless $e->allowed('CREATE_PROVIDER', $provider->owner); + return $e->die_event unless $e->allowed('CREATE_PROVIDER', $provider->owner, $provider); $e->create_acq_provider($provider) or return $e->die_event; $e->commit; return $provider->id; @@ -57,7 +57,7 @@ sub retrieve_provider { my $e = new_editor(authtoken=>$auth); return $e->event unless $e->checkauth; my $provider = $e->retrieve_acq_provider($provider_id) or return $e->event; - return $e->event unless $e->allowed('VIEW_PROVIDER', $provider->owner); + return $e->event unless $e->allowed('VIEW_PROVIDER', $provider->owner, $provider); return $provider; }