[Erp5-report] r23619 - /erp5/trunk/products/ERP5Type/Base.py

[nobody at svn.erp5.org]

Author: nicolas
Date: Mon Sep 15 16:47:52 2008
New Revision: 23619

URL: http://svn.erp5.org?rev=23619&view=rev
Log:
 * Propagate checked_permission parameter:
   This change avoid unauthorized if user can not view a related object through RelationField

Modified:
    erp5/trunk/products/ERP5Type/Base.py

Modified: erp5/trunk/products/ERP5Type/Base.py
URL: http://svn.erp5.org/erp5/trunk/products/ERP5Type/Base.py?rev=23619&r1=23618&r2=23619&view=diff
==============================================================================
--- erp5/trunk/products/ERP5Type/Base.py (original)
+++ erp5/trunk/products/ERP5Type/Base.py Mon Sep 15 16:47:52 2008
@@ -1201,7 +1201,10 @@
             #LOG("method",0,str(id))
             method = getattr(self, id, None)
             if callable(method):
-              result = method()
+              try:
+                result = method(checked_permission=checked_permission)
+              except TypeError:
+                result = method()
               if result not in null_value:
                 if is_list_type:
                   if isinstance(result, (list, tuple)):