[Erp5-report] r13264 - /erp5/trunk/products/ERP5/Document/Document.py

nobody at svn.erp5.org nobody at svn.erp5.org
Wed Mar 7 15:03:09 CET 2007


Author: bartek
Date: Wed Mar  7 15:03:06 2007
New Revision: 13264

URL: http://svn.erp5.org?rev=13264&view=rev
Log:
fixed security bug, added missing imports

Modified:
    erp5/trunk/products/ERP5/Document/Document.py

Modified: erp5/trunk/products/ERP5/Document/Document.py
URL: http://svn.erp5.org/erp5/trunk/products/ERP5/Document/Document.py?rev=13264&r1=13263&r2=13264&view=diff
==============================================================================
--- erp5/trunk/products/ERP5/Document/Document.py (original)
+++ erp5/trunk/products/ERP5/Document/Document.py Wed Mar  7 15:03:06 2007
@@ -28,7 +28,9 @@
 
 from DateTime import DateTime
 from operator import add
+from xmlrpclib import Fault
 import re
+import socket
 
 from AccessControl import ClassSecurityInfo, getSecurityManager
 from Acquisition import aq_base
@@ -48,6 +50,7 @@
   items.sort()
   return tuple(items)
 
+class ConversionError(Exception):pass
 
 class ConversionCacheMixin:
   """
@@ -901,7 +904,7 @@
     return self._getTypeBasedMethod('finishIngestion',
         fallback_script_id='Document_finishIngestion')
 
-  security.declareProtected(Permissions.View, 'convert')
+  security.declareProtected(Permissions.View, 'convertToBase')
   def convertToBase(self, REQUEST=None):
     """
       This is run upon upload of the file to make the first




More information about the Erp5-report mailing list