Subsets API and ACL
Subsets generally belong to an institute (FaoInstitute
). Extend This will grant manage permissions to all users that have permission on the institute.Subset
model by overriding method aclParentObject()
and return this.institute
as parent object.
Update ..ServiceImpl
to test for ADMINISTRATOR role or hasPermission(#subset, 'WRITE')
using @PreAuthorize
.
API
Add a method listMySubsets
that returns user's subsets regardless of state. Base this method on existing listMy****
methods from the Catalog.