[Erp5-dev] the permission of erp5 site

[Yoshinori Okuji]

I have changed the permission of setting a password in a Person object (if you 
use ERP5Security). So when updaing ERP5 to the latest, you must modify the 
permission "Set own password" in your ERP5 Site manually. This permission 
should be allowed only for Manager. Otherwise, everybody can change 
passwords.

YO
-- 
Yoshinori Okuji, Nexedi Research Director
Nexedi: Consulting and Development of Free / Open Source Software
http://www.nexedi.com
ERP5: Full Featured High End Open Source ERP
http://www.erp5.com
ERP5 Wiki: Developer Zone for ERP5 Community
http://wiki.erp5.org