[Erp5-report] r33501 kazuhiko - /erp5/trunk/products/ERP5/Document/MappedProperty.py

nobody at svn.erp5.org nobody at svn.erp5.org
Mon Mar 8 16:10:16 CET 2010


Author: kazuhiko
Date: Mon Mar  8 16:10:11 2010
New Revision: 33501

URL: http://svn.erp5.org?rev=33501&view=rev
Log:
Security should be handled by the target document not by the mapped property document.

Modified:
    erp5/trunk/products/ERP5/Document/MappedProperty.py

Modified: erp5/trunk/products/ERP5/Document/MappedProperty.py
URL: http://svn.erp5.org/erp5/trunk/products/ERP5/Document/MappedProperty.py?rev=33501&r1=33500&r2=33501&view=diff
==============================================================================
--- erp5/trunk/products/ERP5/Document/MappedProperty.py [utf8] (original)
+++ erp5/trunk/products/ERP5/Document/MappedProperty.py [utf8] Mon Mar  8 16:10:11 2010
@@ -49,8 +49,9 @@
                      PropertySheet.CategoryCore,
                      PropertySheet.MappedProperty)
 
-  security.declareProtected(Permissions.AccessContentsInformation,
-                            'getMappedProperty')
+  # Security should be handled by the target document not by the mapped
+  # property document.
+  security.declarePublic('getMappedProperty')
   def getMappedProperty(self, document, property):
     if property.endswith('_list'):
       property = property[:-5]
@@ -65,8 +66,9 @@
     else:
       return getProperty(mapped_property)
 
-  security.declareProtected(Permissions.AccessContentsInformation,
-                            'setMappedProperty')
+  # Security should be handled by the target document not by the mapped
+  # property document.
+  security.declarePublic('setMappedProperty')
   def setMappedProperty(self, document, property, value):
     if property.endswith('_list'):
       property = property[:-5]




More information about the Erp5-report mailing list