[Erp5-report] r22459 - /erp5/trunk/products/ERP5/Extensions/Grep.py

[nobody at svn.erp5.org]

Author: jerome
Date: Fri Jul 11 17:35:23 2008
New Revision: 22459

URL: http://svn.erp5.org?rev=22459&view=rev
Log:
only allow this for manager

Modified:
    erp5/trunk/products/ERP5/Extensions/Grep.py

Modified: erp5/trunk/products/ERP5/Extensions/Grep.py
URL: http://svn.erp5.org/erp5/trunk/products/ERP5/Extensions/Grep.py?rev=22459&r1=22458&r2=22459&view=diff
==============================================================================
--- erp5/trunk/products/ERP5/Extensions/Grep.py (original)
+++ erp5/trunk/products/ERP5/Extensions/Grep.py Fri Jul 11 17:35:23 2008
@@ -1,6 +1,9 @@
 import re
 import cgi
 from Acquisition import aq_base
+from AccessControl import Unauthorized
+from Products.CMFCore.utils import _checkPermission
+from Products.ERP5Type import Permissions
 
 try:
   from Products import ExternalEditor
@@ -32,6 +35,8 @@
         break
 
 def grep(self, pattern, A=0, B=0, r=1, i=0):
+  if not _checkPermission(Permissions.ManagePortal, self):
+    raise Unauthorized(self)
   command_line_arguments = {} # emulate grep command line args
   command_line_arguments['A'] = int(A)
   command_line_arguments['B'] = int(B)