SAK-28074 Changing the Forum feed permission logic

yuyilin · Jan 13, 2015 · 7824838 · 7824838
1 parent a35bd87
commit 7824838
Showing 1 changed file with 5 additions and 5 deletions.
diff --git a/...rc/java/org/sakaiproject/tool/messageforums/entityproviders/ForumsEntityProviderImpl.java b/...rc/java/org/sakaiproject/tool/messageforums/entityproviders/ForumsEntityProviderImpl.java
@@ -159,7 +159,7 @@ private List<?> getAllForaForSite(String siteId,String userId) {
 
 		for(DiscussionForum fatForum : fatFora) {
 
-			if( ! checkAccess(fatForum,userId)) {
+			if( ! checkAccess(fatForum,userId,siteId)) {
 				LOG.warn("Access denied for user id '" + userId + "' to forum '" + fatForum.getId()
 							+ "'. This forum will not be returned.");
 				continue;
@@ -205,7 +205,7 @@ private Object getForum(Long forumId, String siteId, String userId) {
 
 		DiscussionForum fatForum = forumManager.getForumByIdWithTopicsAttachmentsAndMessages(forumId);
 
-		if(checkAccess(fatForum,userId)) {
+		if(checkAccess(fatForum,userId,siteId)) {
 
 			SparseForum sparseForum = new SparseForum(fatForum,developerHelperService);
 
@@ -356,12 +356,12 @@ private Object getMessage(Long messageId,String siteId,String userId) {
 
 	}
 
-	private boolean checkAccess(BaseForum baseForum, String userId) {
+	private boolean checkAccess(BaseForum baseForum, String userId, String siteId) {
 
 		if(baseForum instanceof OpenForum) {
 
-			// If the supplied user is the super user, return true.
-			if(securityService.isSuperUser(userId)) {
+			// If the supplied user is the super user or an instructor, return true.
+			if(securityService.isSuperUser(userId) || forumManager.isInstructor(userId, "/site/" + siteId)) {
 				return true;
 			}