[Erp5-report] r31824 vincent - /erp5/trunk/bt5/erp5_banking_core/SkinTemplateItem/portal_sk...

[nobody at svn.erp5.org]

Author: vincent
Date: Tue Jan 19 15:13:33 2010
New Revision: 31824

URL: http://svn.erp5.org?rev=31824&view=rev
Log:
Add a Manager proxy role.

This fixes cases where a user accesses a bank account of another agency
(this can happen for operation imports at country scale).

It is safe to set a Manager proxy role on this script as it is called on
the only accessed document, so security checks were already done (or
bypassed) upon fetching our context.

Modified:
    erp5/trunk/bt5/erp5_banking_core/SkinTemplateItem/portal_skins/erp5_banking_core/BankAccount_isOpened.xml

Modified: erp5/trunk/bt5/erp5_banking_core/SkinTemplateItem/portal_skins/erp5_banking_core/BankAccount_isOpened.xml
URL: http://svn.erp5.org/erp5/trunk/bt5/erp5_banking_core/SkinTemplateItem/portal_skins/erp5_banking_core/BankAccount_isOpened.xml?rev=31824&r1=31823&r2=31824&view=diff
==============================================================================
--- erp5/trunk/bt5/erp5_banking_core/SkinTemplateItem/portal_skins/erp5_banking_core/BankAccount_isOpened.xml [utf8] (original)
+++ erp5/trunk/bt5/erp5_banking_core/SkinTemplateItem/portal_skins/erp5_banking_core/BankAccount_isOpened.xml [utf8] Tue Jan 19 15:13:33 2010
@@ -67,6 +67,14 @@
             <value> <string></string> </value>
         </item>
         <item>
+            <key> <string>_proxy_roles</string> </key>
+            <value>
+              <tuple>
+                <string>Manager</string>
+              </tuple>
+            </value>
+        </item>
+        <item>
             <key> <string>errors</string> </key>
             <value>
               <tuple/>