[Erp5-report] r13441 - /erp5/trunk/products/ERP5/Tool/ContributionTool.py

nobody at svn.erp5.org nobody at svn.erp5.org
Thu Mar 15 23:05:36 CET 2007


Author: jp
Date: Thu Mar 15 23:05:34 2007
New Revision: 13441

URL: http://svn.erp5.org?rev=13441&view=rev
Log:
Added comments for security.

Modified:
    erp5/trunk/products/ERP5/Tool/ContributionTool.py

Modified: erp5/trunk/products/ERP5/Tool/ContributionTool.py
URL: http://svn.erp5.org/erp5/trunk/products/ERP5/Tool/ContributionTool.py?rev=13441&r1=13440&r2=13441&view=diff
==============================================================================
--- erp5/trunk/products/ERP5/Tool/ContributionTool.py (original)
+++ erp5/trunk/products/ERP5/Tool/ContributionTool.py Thu Mar 15 23:05:34 2007
@@ -341,7 +341,7 @@
     uid = str(id).split('-')[-1]
     object = self.getPortalObject().portal_catalog.unrestrictedGetResultValue(uid=uid)
     if object is not None:
-      return object.getObject()
+      return object.getObject() # Make sure this does not break security. XXX
 
     # Fallback to default method
     if default is _marker:




More information about the Erp5-report mailing list