From: erickson <erickson@dcc99617-32d9-48b4-a31d-7c20da2025e4>
Date: Thu, 25 Mar 2010 21:27:04 +0000 (+0000)
Subject: Comment on undocumented interaction.
X-Git-Url: https://old-git.evergreen-ils.org/?a=commitdiff_plain;h=7d477c32174d72abf0195a37c88842c4c4c5fe5c;p=evergreen%2Fmasslnc.git

Comment on undocumented interaction.

git-svn-id: svn://svn.open-ils.org/ILS/trunk@15996 dcc99617-32d9-48b4-a31d-7c20da2025e4
---

diff --git a/Open-ILS/src/perlmods/OpenILS/Application/AppUtils.pm b/Open-ILS/src/perlmods/OpenILS/Application/AppUtils.pm
index 2a237576b1..238554c919 100644
--- a/Open-ILS/src/perlmods/OpenILS/Application/AppUtils.pm
+++ b/Open-ILS/src/perlmods/OpenILS/Application/AppUtils.pm
@@ -1265,6 +1265,12 @@ sub ou_ancestor_setting_value {
 # that permission.  This means that if you call this method without an
 # authtoken param, you can get whatever org unit setting values you want.
 # API users beware.
+#
+# NOTE: If you supply an editor ($e) arg AND an auth token arg, the editor's
+# authtoken is checked, but the $auth arg is NOT checked.  To say that another
+# way, be sure NOT to pass an editor argument if you want your token checked.
+# Otherwise the auth arg is just a flag saying "check the editor".  
+
 sub ou_ancestor_setting {
     my( $self, $orgid, $name, $e, $auth ) = @_;
     $e = $e || OpenILS::Utils::CStoreEditor->new(