The docs say that it is not possible to view private objects that don't belong to you. Is there a way for admins to get around this? Or is the only solution to use access_id > 0 ?
More detail:
I'm creating transactions for users as ElggObjects when they purchase site credits. To my mind these should be private access only - other users should never be able to view - but that creates a problem if the admin can't view either. I was looking through the code of a plugin here and it looked like they got around this by creating separate transactions owned by the admin. Unfortunately it's possible to have more than one admin, so this solution would never really work.
I'm assuming this isn't really a bizarre thing to want to do - surely admins have the right to access anything they want - so hoping there is a standard solution I'm just too blind/stupid to see/come up with.
info@elgg.org
Security issues should be reported to security@elgg.org!
©2014 the Elgg Foundation
Elgg is a registered trademark of Thematic Networks.
Cover image by RaĆ¼l Utrera is used under Creative Commons license.
Icons by Flaticon and FontAwesome.
- Kevin Jardine@kevin
Kevin Jardine - 0 likes
You must log in to post replies.Admins can access private objects (access_id=0).