[Erp5-report] r23135 - in /erp5/trunk/bt5/erp5_crm: ActionTemplateItem/portal_types/Support...

[nobody at svn.erp5.org]

Author: rafael
Date: Mon Aug 25 02:19:17 2008
New Revision: 23135

URL: http://svn.erp5.org?rev=23135&view=rev
Log:
Use Base_checkPermission to prevent security issues...

Modified:
    erp5/trunk/bt5/erp5_crm/ActionTemplateItem/portal_types/Support%20Request/jump_related_bug.xml
    erp5/trunk/bt5/erp5_crm/ActionTemplateItem/portal_types/Support%20Request/new_bug.xml
    erp5/trunk/bt5/erp5_crm/bt/revision

Modified: erp5/trunk/bt5/erp5_crm/ActionTemplateItem/portal_types/Support%20Request/jump_related_bug.xml
URL: http://svn.erp5.org/erp5/trunk/bt5/erp5_crm/ActionTemplateItem/portal_types/Support%2520Request/jump_related_bug.xml?rev=23135&r1=23134&r2=23135&view=diff
==============================================================================
--- erp5/trunk/bt5/erp5_crm/ActionTemplateItem/portal_types/Support%20Request/jump_related_bug.xml (original)
+++ erp5/trunk/bt5/erp5_crm/ActionTemplateItem/portal_types/Support%20Request/jump_related_bug.xml Mon Aug 25 02:19:17 2008
@@ -97,7 +97,7 @@
       <dictionary>
         <item>
             <key> <string>text</string> </key>
-            <value> <string>python:getattr(portal, \'support_request_module\', None) is not None</string> </value>
+            <value> <string>python: portal.Base_checkPermission(\'bug_module\', \'View\')</string> </value>
         </item>
       </dictionary>
     </pickle>

Modified: erp5/trunk/bt5/erp5_crm/ActionTemplateItem/portal_types/Support%20Request/new_bug.xml
URL: http://svn.erp5.org/erp5/trunk/bt5/erp5_crm/ActionTemplateItem/portal_types/Support%2520Request/new_bug.xml?rev=23135&r1=23134&r2=23135&view=diff
==============================================================================
--- erp5/trunk/bt5/erp5_crm/ActionTemplateItem/portal_types/Support%20Request/new_bug.xml (original)
+++ erp5/trunk/bt5/erp5_crm/ActionTemplateItem/portal_types/Support%20Request/new_bug.xml Mon Aug 25 02:19:17 2008
@@ -93,7 +93,7 @@
       <dictionary>
         <item>
             <key> <string>text</string> </key>
-            <value> <string>python: getattr(here,\'bug_module\', None) is not None</string> </value>
+            <value> <string>python: portal.Base_checkPermission(\'bug_module\', \'Add portal content\')</string> </value>
         </item>
       </dictionary>
     </pickle>

Modified: erp5/trunk/bt5/erp5_crm/bt/revision
URL: http://svn.erp5.org/erp5/trunk/bt5/erp5_crm/bt/revision?rev=23135&r1=23134&r2=23135&view=diff
==============================================================================
--- erp5/trunk/bt5/erp5_crm/bt/revision (original)
+++ erp5/trunk/bt5/erp5_crm/bt/revision Mon Aug 25 02:19:17 2008
@@ -1,1 +1,1 @@
-292
+293