[Erp5-report] r31601 kazuhiko - in /erp5/trunk/products: CMFCategory/ ERP5Type/

[nobody at svn.erp5.org]

Author: kazuhiko
Date: Wed Jan  6 15:43:08 2010
New Revision: 31601

URL: http://svn.erp5.org?rev=31601&view=rev
Log:
category testing API should be protected by Permissions.AccessContentsInformation not Permissions.View.
XXX we need more review for other getter methods in Base.py.

Modified:
    erp5/trunk/products/CMFCategory/Category.py
    erp5/trunk/products/ERP5Type/Base.py

Modified: erp5/trunk/products/CMFCategory/Category.py
URL: http://svn.erp5.org/erp5/trunk/products/CMFCategory/Category.py?rev=31601&r1=31600&r2=31601&view=diff
==============================================================================
--- erp5/trunk/products/CMFCategory/Category.py [utf8] (original)
+++ erp5/trunk/products/CMFCategory/Category.py [utf8] Wed Jan  6 15:43:08 2010
@@ -689,7 +689,7 @@
       """
       return '/'.join(self.portal_url.getRelativeContentPath(self)[1:])
 
-    security.declareProtected( Permissions.View, 'isMemberOf' )
+    security.declareProtected( Permissions.AccessContentsInformation, 'isMemberOf' )
     def isMemberOf(self, category, **kw):
       """
         Tests if an object if member of a given category

Modified: erp5/trunk/products/ERP5Type/Base.py
URL: http://svn.erp5.org/erp5/trunk/products/ERP5Type/Base.py?rev=31601&r1=31600&r2=31601&view=diff
==============================================================================
--- erp5/trunk/products/ERP5Type/Base.py [utf8] (original)
+++ erp5/trunk/products/ERP5Type/Base.py [utf8] Wed Jan  6 15:43:08 2010
@@ -2405,14 +2405,14 @@
     self._getCategoryTool()._cleanupCategories()
 
   # Category testing
-  security.declareProtected( Permissions.View, 'isMemberOf' )
+  security.declareProtected( Permissions.AccessContentsInformation, 'isMemberOf' )
   def isMemberOf(self, category, **kw):
     """
       Tests if an object if member of a given category
     """
     return self._getCategoryTool().isMemberOf(self, category, **kw)
 
-  security.declareProtected( Permissions.View, 'isAcquiredMemberOf' )
+  security.declareProtected( Permissions.AccessContentsInformation, 'isAcquiredMemberOf' )
   def isAcquiredMemberOf(self, category):
     """
       Tests if an object if member of a given category