[Erp5-report] r40447 jerome - in /erp5/trunk/bt5/erp5_accounting: SkinTemplateItem/portal_s...
nobody at svn.erp5.org
nobody at svn.erp5.org
Mon Nov 22 10:54:31 CET 2010
Author: jerome
Date: Mon Nov 22 10:54:30 2010
New Revision: 40447
URL: http://svn.erp5.org?rev=40447&view=rev
Log:
add proxy role to this script, because some filtering are done inside the script and the current user may not have the permission to access some lines that will be filtered
Modified:
erp5/trunk/bt5/erp5_accounting/SkinTemplateItem/portal_skins/erp5_accounting/Account_getNotGroupedAccountingTransactionList.xml
erp5/trunk/bt5/erp5_accounting/bt/revision
Modified: erp5/trunk/bt5/erp5_accounting/SkinTemplateItem/portal_skins/erp5_accounting/Account_getNotGroupedAccountingTransactionList.xml
URL: http://svn.erp5.org/erp5/trunk/bt5/erp5_accounting/SkinTemplateItem/portal_skins/erp5_accounting/Account_getNotGroupedAccountingTransactionList.xml?rev=40447&r1=40446&r2=40447&view=diff
==============================================================================
--- erp5/trunk/bt5/erp5_accounting/SkinTemplateItem/portal_skins/erp5_accounting/Account_getNotGroupedAccountingTransactionList.xml [utf8] (original)
+++ erp5/trunk/bt5/erp5_accounting/SkinTemplateItem/portal_skins/erp5_accounting/Account_getNotGroupedAccountingTransactionList.xml [utf8] Mon Nov 22 10:54:30 2010
@@ -58,6 +58,9 @@ getObject = portal.portal_catalog.getObj
params = portal.ERP5Accounting_getParams(selection_name)\n
N_ = lambda msg: Message(\'erp5_ui\', msg)\n
\n
+# this also prevents to be called directly\n
+assert \'node_uid\' in kw\n
+\n
mirror_section_relative_url = None\n
if kw.get(\'mirror_section_uid\'):\n
mirror_section_relative_url =\\\n
@@ -97,7 +100,7 @@ for brain in portal.Base_zGetNotGroupedM
transaction.getPortalType() not in portal_type_list:\n
continue\n
\n
- is_source = transaction.AccountingTransaction_isSourceView()\n
+ is_source = (brain.mirror_section_relative_url == mvt.getDestinationSection())\n
if is_source:\n
if payment_uid and mvt.getSourcePaymentUid() != payment_uid:\n
continue\n
@@ -190,12 +193,117 @@ return line_list\n
<value> <string>selection=None, sort_on=[], node_category=None, node_category_strict_membership=None, from_date=None, selection_name=None, function=None, project_uid=None, analytic_column_list=(), **kw</string> </value>
</item>
<item>
+ <key> <string>_proxy_roles</string> </key>
+ <value>
+ <tuple>
+ <string>Manager</string>
+ </tuple>
+ </value>
+ </item>
+ <item>
<key> <string>errors</string> </key>
<value>
<tuple/>
</value>
</item>
<item>
+ <key> <string>func_code</string> </key>
+ <value>
+ <object>
+ <klass>
+ <global name="FuncCode" module="Shared.DC.Scripts.Signature"/>
+ </klass>
+ <tuple/>
+ <state>
+ <dictionary>
+ <item>
+ <key> <string>co_argcount</string> </key>
+ <value> <int>9</int> </value>
+ </item>
+ <item>
+ <key> <string>co_varnames</string> </key>
+ <value>
+ <tuple>
+ <string>selection</string>
+ <string>sort_on</string>
+ <string>node_category</string>
+ <string>node_category_strict_membership</string>
+ <string>from_date</string>
+ <string>selection_name</string>
+ <string>function</string>
+ <string>project_uid</string>
+ <string>analytic_column_list</string>
+ <string>kw</string>
+ <string>Products.PythonScripts.standard</string>
+ <string>Object</string>
+ <string>Products.ERP5Type.Document</string>
+ <string>newTempBase</string>
+ <string>Products.ERP5Type.Message</string>
+ <string>Message</string>
+ <string>_getattr_</string>
+ <string>context</string>
+ <string>portal</string>
+ <string>getObject</string>
+ <string>params</string>
+ <string>N_</string>
+ <string>AssertionError</string>
+ <string>None</string>
+ <string>mirror_section_relative_url</string>
+ <string>_getitem_</string>
+ <string>payment_uid</string>
+ <string>portal_type_filter</string>
+ <string>portal_type_list</string>
+ <string>total_debit</string>
+ <string>total_credit</string>
+ <string>total_debit_price</string>
+ <string>total_credit_price</string>
+ <string>line_list</string>
+ <string>_getiter_</string>
+ <string>brain</string>
+ <string>mvt</string>
+ <string>transaction</string>
+ <string>is_source</string>
+ <string>specific_reference</string>
+ <string>mirror_section_title</string>
+ <string>section_title</string>
+ <string>max</string>
+ <string>debit</string>
+ <string>_inplacevar_</string>
+ <string>credit</string>
+ <string>debit_price</string>
+ <string>credit_price</string>
+ <string>brain_date</string>
+ <string>line</string>
+ <string>dict</string>
+ <string>analytic_info</string>
+ <string>analytic_column</string>
+ <string>analytic_column_title</string>
+ <string>_write_</string>
+ </tuple>
+ </value>
+ </item>
+ </dictionary>
+ </state>
+ </object>
+ </value>
+ </item>
+ <item>
+ <key> <string>func_defaults</string> </key>
+ <value>
+ <tuple>
+ <none/>
+ <list/>
+ <none/>
+ <none/>
+ <none/>
+ <none/>
+ <none/>
+ <none/>
+ <tuple/>
+ </tuple>
+ </value>
+ </item>
+ <item>
<key> <string>id</string> </key>
<value> <string>Account_getNotGroupedAccountingTransactionList</string> </value>
</item>
Modified: erp5/trunk/bt5/erp5_accounting/bt/revision
URL: http://svn.erp5.org/erp5/trunk/bt5/erp5_accounting/bt/revision?rev=40447&r1=40446&r2=40447&view=diff
==============================================================================
--- erp5/trunk/bt5/erp5_accounting/bt/revision [utf8] (original)
+++ erp5/trunk/bt5/erp5_accounting/bt/revision [utf8] Mon Nov 22 10:54:30 2010
@@ -1 +1 @@
-1405
\ No newline at end of file
+1407
\ No newline at end of file
More information about the Erp5-report
mailing list