diff --git a/Lib/GrouperApiAccess.php b/Lib/GrouperApiAccess.php index 518ddd7..fefbac4 100644 --- a/Lib/GrouperApiAccess.php +++ b/Lib/GrouperApiAccess.php @@ -265,7 +265,8 @@ public function getMembersInGroup(array $queryData) { try { // First verify that user has read access to group - if ($this->verifyPrivileges($queryData, 'read') === false) { + $privs = array('read', 'admin', 'update'); + if ($this->verifyPrivileges($queryData, $privs) === false) { return array( array( "sourceId" => "ldap", @@ -305,11 +306,11 @@ public function getMembersInGroup(array $queryData) { /** * @param array $queryData Array of conditions for querying - * @param string $privilege attribute verifying user has set + * @param array $privilege attributes that need verifying for a user * @return bool If user has said attribute correctly set * @throws GrouperLiteException */ - public function verifyPrivileges(array $queryData, string $privilege) { + public function verifyPrivileges(array $queryData, array $privileges) { //Build request logic $verifyPrivs = array( "WsRestGetGrouperPrivilegesLiteRequest" => array( @@ -329,8 +330,6 @@ public function verifyPrivileges(array $queryData, string $privilege) { if (isset($results['WsGetGrouperPrivilegesLiteResult']['resultMetadata']['resultCode']) && $results['WsGetGrouperPrivilegesLiteResult']['resultMetadata']['resultCode'] != NULL) { if ($results['WsGetGrouperPrivilegesLiteResult']['resultMetadata']['resultCode'] == 'SUCCESS_ALLOWED') { return true; - } else { - return false; } } } catch (Exception $e) { diff --git a/View/GrouperGroups/groupmember.ctp b/View/GrouperGroups/groupmember.ctp index a63549b..afcfb41 100644 --- a/View/GrouperGroups/groupmember.ctp +++ b/View/GrouperGroups/groupmember.ctp @@ -88,7 +88,7 @@ $numColumns = count($columns); - + No working groups. diff --git a/View/GrouperGroups/groupowner.ctp b/View/GrouperGroups/groupowner.ctp index fecbb2a..fc488e5 100644 --- a/View/GrouperGroups/groupowner.ctp +++ b/View/GrouperGroups/groupowner.ctp @@ -101,7 +101,7 @@ $numColumns = count($columns); - + No working groups.