SparkDevNetwork/Rock-ChMS — Issue #3: Default Authorization Precedence
Author: azturner
Created: 2011-12-03 11:43:23+00:00
State: open

Currently, the default authorization for a securable object takes precedence over the parent authority when there are no matching authorization rules that are defined or match the current user. The authorized method needs to instead first look for a matching rule, then check for a parent authority, and only after checking those, return the default authorization.