I think this could be a possible bug ( or perhaps a misconfiguration of my ez installation). I'm working on a couple of extensions using ezjscore inside each one i defined an ezjscore.ini.append.php:
ezjscore.ini.append.php inside mcalendar extension:
[ezjscServer]
FunctionList[]=mcalendar_removeEvent
FunctionList[]=mcalendar_updateEventAjax
FunctionList[]=mcalendar_updateEventTimeSlot
FunctionList[]=mcalendar_addEventAjax
FunctionList[]=mcalendar_fetchEvents
[ezjscServer_mcalendar]
Functions[]=mcalendar
PermissionPrFunction=enabled
Class=mcServerFunctions
File=extension/mcalendar/classes/mcserverfunctions.php
ezjscore inside ticketsystem extension:
[ezjscServer]
FunctionList[]=ticketsystem_changeTicketState
FunctionList[]=ticketsystem_acquireTicket
[ezjscServer_ticketsystem]
Functions[]=ticketsystem[ezjscServer]
PermissionPrFunction=enabled
Class=ticketsystemServerFunctions
File=extension/ticketsystem/classes/ticketsystemserverfunctions.php
If I do not enforce any policy (regarding ezjscore functions) and allow everyone to use anything, everything works.
If , for example, I create a policy inside Role A to allow only some users to use mcalendar_fetchEvents everything is still working all right.
But, if for any reason, I want to enforce a new policy inside Role B to allow only certain users to use ticketsystem_acquireTicket every ezjscore functions stops working. And even though I log in a user whom I assigned role A I can no more use mcalendar_fetchEvents.
I think this strange behavior is caused by method ezjscServerRouter::hasAccess.
The original version reads:
// Something with $accessResult
foreach ( $accessResult['policies'] as $pkey => $limitationArray )
{
if ( isset( $limitationArray['FunctionList'] ) )
{
if ( !in_array( $permissionName, $limitationArray['FunctionList'] ) )
return false;
}
}
}
return true;
after some modifications:
// Something with $accessResult
foreach ( $accessResult['policies'] as $pkey => $limitationArray )
{
if ( isset( $limitationArray['FunctionList'] ) )
{
if ( in_array( $permissionName, $limitationArray['FunctionList'] ) )
return true;
}
}
}
return false;
policies are enforced correctly.
