[Erp5-report] r15539 - /erp5/trunk/products/ERP5Form/ListBox.py

[nobody at svn.erp5.org]

Author: yusei
Date: Tue Aug  7 18:51:29 2007
New Revision: 15539

URL: http://svn.erp5.org?rev=15539&view=rev
Log:
Added a todo comment about security.

Modified:
    erp5/trunk/products/ERP5Form/ListBox.py

Modified: erp5/trunk/products/ERP5Form/ListBox.py
URL: http://svn.erp5.org/erp5/trunk/products/ERP5Form/ListBox.py?rev=15539&r1=15538&r2=15539&view=diff
==============================================================================
--- erp5/trunk/products/ERP5Form/ListBox.py (original)
+++ erp5/trunk/products/ERP5Form/ListBox.py Tue Aug  7 18:51:29 2007
@@ -3026,6 +3026,8 @@
           gv[k] = getattr(request, k, None)
       for url, v in self.update_dict.items():
         v.update(gv)
+        ## XXX security check is needed.
+        ## XXX we need to make restricted version of edit method.
         self.field.restrictedTraverse(url).edit(**v)
 
 allow_class(ListBoxEditor)