2009-05-28 Seb

* We might think about usage of ERP5Accounting_getParams with people that can not see the account_module, so fix security error when getting currency precision

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@27227 20353a03-c40f-0410-a6d1-a30d3c3de9de

bt5/erp5_accounting/SkinTemplateItem/portal_skins/erp5_accounting/ERP5Accounting_getParams.xml

@@ -103,8 +103,9 @@ if section_category:\n
   params[\'section_uid\'] = context.Base_getSectionUidListForSectionCategory(section_category)\n
   currency = context.Base_getCurrencyForSection(section_category)\n
   # getQuantityPrecisionFromResource is defined on Base, but the portal is not \n
-  # an instance of Base, so we call it on account_module.\n
-  params[\'precision\'] = context.account_module\\\n
+  # an instance of Base, so we call it on portal_simulation because it is\n
+  # accessible to everyone.\n
+  params[\'precision\'] = context.portal_simulation\\\n
                             .getQuantityPrecisionFromResource(currency)\n
 \n
   # calculate the period_start_date for this section\n

bt5/erp5_accounting/bt/revision

-927
\ No newline at end of file
+928
\ No newline at end of file