svn commit: r674150 - /ofbiz/trunk/specialpurpose/projectmgr/script/org/ofbiz/project/ProjectPermissionServices.xml

[hansbak-2]

Author: hansbak
Date: Fri Jul  4 21:23:18 2008
New Revision: 674150

URL: http://svn.apache.org/viewvc?rev=674150&view=rev
Log:
changed project security: should always be able to create and update ones own timesheet

Modified:
    ofbiz/trunk/specialpurpose/projectmgr/script/org/ofbiz/project/ProjectPermissionServices.xml

Modified: ofbiz/trunk/specialpurpose/projectmgr/script/org/ofbiz/project/ProjectPermissionServices.xml
URL: http://svn.apache.org/viewvc/ofbiz/trunk/specialpurpose/projectmgr/script/org/ofbiz/project/ProjectPermissionServices.xml?rev=674150&r1=674149&r2=674150&view=diff
==============================================================================
--- ofbiz/trunk/specialpurpose/projectmgr/script/org/ofbiz/project/ProjectPermissionServices.xml (original)
+++ ofbiz/trunk/specialpurpose/projectmgr/script/org/ofbiz/project/ProjectPermissionServices.xml Fri Jul  4 21:23:18 2008
@@ -223,13 +223,11 @@
                             <not><if-has-permission permission="PROJECTMGR_ROLE_TIMESHEET_UPDATE"/></not>
                             <if-compare field="mainAction" value="UPDATE" operator="equals"/>
                         </and>
-                        <and>
-                            <if-has-permission permission="PROJECTMGR_ROLE_TIMESHEET_CREATE"/>
+                        <and><!-- can always create ones own timesheet -->
                             <if-compare field="mainAction" value="CREATE" operator="equals"/>
                             <if-compare-field field="parameters.partyId" to-field="parameters.userLogin.partyId" operator="equals"/>
                         </and>
-                        <and>
-                            <if-has-permission permission="PROJECTMGR_ROLE_TIMESHEET_UPDATE"/>
+                        <and><!-- can always update ones own timesheet -->
                             <if-compare field="mainAction" value="UPDATE" operator="equals"/>
                             <if-compare-field field="parameters.partyId" to-field="parameters.userLogin.userLoginId" operator="equals"/>
                         </and>