Security on FORMPERMISSIONS

[eduard93]

[eduard93]

Discussed with @dmitry-zasypkin today. Points:

• Parameter FORMEDITROLE - form-specific role if $roles has it, user can edit form fields
• Parameter CANCREATEFORM - application wide role, that $roles must possess for user to create forms
• QUESTION: role check&inheritance ($roles has a role1, which has role2). Param (from above) is role2. How do we check that $roles has role2

[eduard93]

Answer: roles are flattened. In the above example (user has role1 which has role2, users $roles would be equal to role1,role2)

Except for %ALL