[dokuwiki] Re: [PATCH] MySQL canDo() patch

Andreas Gohr wrote: 

The profile button is only shown when $auth->canDo('modifyUser') returns
true. The MySQL backend only returns true for that when the delGroup and
delUserGroup config strings are set.

This is bad because both are not needed for letting a user change
it's profile (You can't change your groups in the profile dialog).


I don't think there is any reason for modifyUser to be connected to delGroup.

I'd reckon MySQL backend is being to stringent in refusing canDo(modifyUser) if leaveGroup & joinGroup aren't supported. If some parts of a user profile can be modified, the backend should return true and determine which parts of the modifyUser request to apply and which to reject.

Chris
--
DokuWiki mailing list - more info at
http://wiki.splitbrain.org/wiki:mailinglist

Other related posts: