[pLog-svn] r6627 - plog/branches/lifetype-1.2/class/action/admin

[jondaley at devel.lifetype.net]

Author: jondaley
Date: 2008-06-21 14:53:42 -0400 (Sat, 21 Jun 2008)
New Revision: 6627

Modified:
   plog/branches/lifetype-1.2/class/action/admin/adminaddpostaction.class.php
   plog/branches/lifetype-1.2/class/action/admin/adminsavedraftarticleajaxaction.class.php
Log:
added comments that users with 'add' privileges can also 'update' articles if they are tricky

Modified: plog/branches/lifetype-1.2/class/action/admin/adminaddpostaction.class.php
===================================================================
--- plog/branches/lifetype-1.2/class/action/admin/adminaddpostaction.class.php	2008-06-21 18:53:10 UTC (rev 6626)
+++ plog/branches/lifetype-1.2/class/action/admin/adminaddpostaction.class.php	2008-06-21 18:53:42 UTC (rev 6627)
@@ -63,6 +63,8 @@
 			$this->notifyEvent( EVENT_PRE_POST_ADD, Array( "article" => &$article ));				
 			
 			// in case the post is already in the db
+            // TODO: I am guessing this is for updating drafts?
+            // this allows people with only add permissions to update any article
 			if( $this->_postId != "" ) {
 				$article->setId( $this->_postId );
 				$artId = $this->_postId;

Modified: plog/branches/lifetype-1.2/class/action/admin/adminsavedraftarticleajaxaction.class.php
===================================================================
--- plog/branches/lifetype-1.2/class/action/admin/adminsavedraftarticleajaxaction.class.php	2008-06-21 18:53:10 UTC (rev 6626)
+++ plog/branches/lifetype-1.2/class/action/admin/adminsavedraftarticleajaxaction.class.php	2008-06-21 18:53:42 UTC (rev 6627)
@@ -51,6 +51,7 @@
             }
 
             // in case the post is already in the db
+            // TODO: this allows people with only add permissions to update any article
             if( $this->_postId != "" ) {
                 $article->setId( $this->_postId );
                 $postSavedOk = $articles->updateArticle( $article );