[API] Possibility to skip user permission check
mooffie - October 12, 2008 - 15:28
| Project: | Flag |
| Version: | 6.x-1.x-dev |
| Component: | Code |
| Category: | feature request |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | closed |
Jump to:
Description
Our API should have the ability to flag an item, on behalf of a user, even if the this user doesn't have permission to use this flag.
| Attachment | Size |
|---|---|
| skip_perm_check.diff | 1.27 KB |
#1
The #320276: Respect flag defaults on node/add forms regardless of permission issue describes one use case for this feature.
#2
Another reason to have this feature: security.
It's ironic, but in not having this feature we may drive some programmers into doing some unsecure things (e.g. switching to the 'admin' account because cron.php runs as anonymous).
#3
Looks good to me.
#4
Committed.
#5
Automatically closed -- issue fixed for two weeks with no activity.