[Erp5-report] r33501 kazuhiko - /erp5/trunk/products/ERP5/Document/MappedProperty.py
nobody at svn.erp5.org
nobody at svn.erp5.org
Mon Mar 8 16:10:16 CET 2010
Author: kazuhiko
Date: Mon Mar 8 16:10:11 2010
New Revision: 33501
URL: http://svn.erp5.org?rev=33501&view=rev
Log:
Security should be handled by the target document not by the mapped property document.
Modified:
erp5/trunk/products/ERP5/Document/MappedProperty.py
Modified: erp5/trunk/products/ERP5/Document/MappedProperty.py
URL: http://svn.erp5.org/erp5/trunk/products/ERP5/Document/MappedProperty.py?rev=33501&r1=33500&r2=33501&view=diff
==============================================================================
--- erp5/trunk/products/ERP5/Document/MappedProperty.py [utf8] (original)
+++ erp5/trunk/products/ERP5/Document/MappedProperty.py [utf8] Mon Mar 8 16:10:11 2010
@@ -49,8 +49,9 @@
PropertySheet.CategoryCore,
PropertySheet.MappedProperty)
- security.declareProtected(Permissions.AccessContentsInformation,
- 'getMappedProperty')
+ # Security should be handled by the target document not by the mapped
+ # property document.
+ security.declarePublic('getMappedProperty')
def getMappedProperty(self, document, property):
if property.endswith('_list'):
property = property[:-5]
@@ -65,8 +66,9 @@
else:
return getProperty(mapped_property)
- security.declareProtected(Permissions.AccessContentsInformation,
- 'setMappedProperty')
+ # Security should be handled by the target document not by the mapped
+ # property document.
+ security.declarePublic('setMappedProperty')
def setMappedProperty(self, document, property, value):
if property.endswith('_list'):
property = property[:-5]
More information about the Erp5-report
mailing list