[ZendTo] Re: Enhancement request

[Brad Beckenhauer]

Sergio,

Thank you for looking up that bit of code,  I had not consider testing multiple users verse single recipients.

It's nice to have someone else on the forum that has php skillsets.

Thanks 
Brad

/2010 at 6:19 PM, in message <4C6C6A77.4090609 at di.unito.it>, Sergio Rabellino <rabellino at di.unito.it> wrote:

Brad Beckenhauer ha scritto: 


>>> On 8/17/2010 at 7:04 PM, in message <4C6B2395.80909 at di.unito.it>, Sergio Rabellino <rabellino at di.unito.it> wrote:


Brad Beckenhauer ha scritto: 
We are a non-profit organization and have annual conferences where we would like to be able to provide the member doctors a claim id/claim pass code to download conference materials.

But if you have the claim id/claim passcode, you can also delete the material (so other doctors would not be able to access the material).

Are your sure ? As far as i remember only the owner of a dropoff or an admin can delete it, or something is changed along the new releases ?

Positive.  anyone with the claim ID and passcode can delete.


Sorry, i did a check and you are (obviously) right.
This is the hot line in lib/NSSDropoff.php that control if the "delete" button is enabled or not:

> $smarty->assign('isDeleteable', ( $clickable && ( $isSender || $isSingleRecip )));

So this is true only if there is a single recipient (no cross-deleting between multiple rcpt) or if you are the sender.
My opinion remains that what you need is not the business of zendto.

best regards

Enhancement requests:
1) un-authenticated users using a claim id/claim pass code only to retrieve a dropoff should not be able to delete a dropoff.

2) Admins can override the default retention period and specify a "keep until" date or "keep forever".
  
For your purposes it's simpler create an authenticated web page where admint to download only some users, I believe it's not the correct usage of a tool as zendto.


_______________________________________________
ZendTo mailing list
ZendTo at zend.to
http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto


-- 

Ing. Sergio Rabellino

Università degli Studi di Torino
Dipartimento di Informatica
ICT Services Director
Tel +39-0116706701  Fax +39-011751603
C.so Svizzera , 185 - 10149 - Torino

 


_______________________________________________
ZendTo mailing list
ZendTo at zend.to
http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto


-- 

Ing. Sergio Rabellino

Università degli Studi di Torino
Dipartimento di Informatica
ICT Services Director
Tel +39-0116706701  Fax +39-011751603
C.so Svizzera , 185 - 10149 - Torino

 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ecs.soton.ac.uk/pipermail/zendto/attachments/20100820/c352fc24/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/jpeg
Size: 4167 bytes
Desc: not available
Url : http://mailman.ecs.soton.ac.uk/pipermail/zendto/attachments/20100820/c352fc24/attachment.jpe 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/jpeg
Size: 4167 bytes
Desc: not available
Url : http://mailman.ecs.soton.ac.uk/pipermail/zendto/attachments/20100820/c352fc24/attachment-0001.jpe