[Erp5-report] r15539 - /erp5/trunk/products/ERP5Form/ListBox.py
nobody at svn.erp5.org
nobody at svn.erp5.org
Tue Aug 7 18:51:29 CEST 2007
Author: yusei
Date: Tue Aug 7 18:51:29 2007
New Revision: 15539
URL: http://svn.erp5.org?rev=15539&view=rev
Log:
Added a todo comment about security.
Modified:
erp5/trunk/products/ERP5Form/ListBox.py
Modified: erp5/trunk/products/ERP5Form/ListBox.py
URL: http://svn.erp5.org/erp5/trunk/products/ERP5Form/ListBox.py?rev=15539&r1=15538&r2=15539&view=diff
==============================================================================
--- erp5/trunk/products/ERP5Form/ListBox.py (original)
+++ erp5/trunk/products/ERP5Form/ListBox.py Tue Aug 7 18:51:29 2007
@@ -3026,6 +3026,8 @@
gv[k] = getattr(request, k, None)
for url, v in self.update_dict.items():
v.update(gv)
+ ## XXX security check is needed.
+ ## XXX we need to make restricted version of edit method.
self.field.restrictedTraverse(url).edit(**v)
allow_class(ListBoxEditor)
More information about the Erp5-report
mailing list