[Erp5-report] r36888 luke - in /erp5/trunk/bt5/erp5_accounting: SkinTemplateItem/portal_ski...

[nobody at svn.erp5.org]

Author: luke
Date: Tue Jul  6 13:09:24 2010
New Revision: 36888

URL: http://svn.erp5.org?rev=36888&view=rev
Log:
 - restrict fetched documents to those on which user has access
   permission

Modified:
    erp5/trunk/bt5/erp5_accounting/SkinTemplateItem/portal_skins/erp5_accounting/Invoice_getRemainingTotalPayablePrice.xml
    erp5/trunk/bt5/erp5_accounting/bt/revision

Modified: erp5/trunk/bt5/erp5_accounting/SkinTemplateItem/portal_skins/erp5_accounting/Invoice_getRemainingTotalPayablePrice.xml
URL: http://svn.erp5.org/erp5/trunk/bt5/erp5_accounting/SkinTemplateItem/portal_skins/erp5_accounting/Invoice_getRemainingTotalPayablePrice.xml?rev=36888&r1=36887&r2=36888&view=diff
==============================================================================
--- erp5/trunk/bt5/erp5_accounting/SkinTemplateItem/portal_skins/erp5_accounting/Invoice_getRemainingTotalPayablePrice.xml [utf8] (original)
+++ erp5/trunk/bt5/erp5_accounting/SkinTemplateItem/portal_skins/erp5_accounting/Invoice_getRemainingTotalPayablePrice.xml [utf8] Tue Jul  6 13:09:24 2010
@@ -108,7 +108,8 @@ def getIsSourceMovementItemList(invoice)
   movement_item_list = [(is_source, m) for m in invoice.getMovementList(\n
           portal_type=portal.getPortalAccountingMovementTypeList())]\n
   for btt in context.getCausalityRelatedValueList(\n
-                        portal_type=\'Balance Transfer Transaction\'):\n
+                        portal_type=\'Balance Transfer Transaction\',\n
+                        checked_permission=\'Access contents information\'):\n
     if simulation_state and btt.getSimulationState() not in simulation_state:\n
       continue\n
     btt_is_source = btt.AccountingTransaction_isSourceView()\n
@@ -156,7 +157,8 @@ for is_source, line in getIsSourceMoveme
 \n
 \n
 related_transaction_list = context.getCausalityRelatedValueList(\n
-                          portal_type=accounting_transaction_type_list)\n
+                          portal_type=accounting_transaction_type_list,\n
+                          checked_permission=\'Access contents information\')\n
 \n
 # substract all causalities\n
 for related_transaction in related_transaction_list:\n

Modified: erp5/trunk/bt5/erp5_accounting/bt/revision
URL: http://svn.erp5.org/erp5/trunk/bt5/erp5_accounting/bt/revision?rev=36888&r1=36887&r2=36888&view=diff
==============================================================================
--- erp5/trunk/bt5/erp5_accounting/bt/revision [utf8] (original)
+++ erp5/trunk/bt5/erp5_accounting/bt/revision [utf8] Tue Jul  6 13:09:24 2010
@@ -1 +1 @@
-1298
\ No newline at end of file
+1299
\ No newline at end of file