Only display modules if the user has the View permission.

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@10341 20353a03-c40f-0410-a6d1-a30d3c3de9de

product/ERP5/bootstrap/erp5_core/SkinTemplateItem/portal_skins/erp5_core/ERP5Site_getModuleItemList.xml

@@ -71,7 +71,7 @@
             <value> <string>from Products.ERP5Type.Cache import CachingMethod, clearCache\n
 from ZODB.POSException import ConflictError\n
 \n
-user = context.portal_membership.getAuthenticatedMember().getUserName()\n
+user = context.portal_membership.getAuthenticatedMember()\n
 \n
 portal = context.getPortalObject()\n
 \n
@@ -82,10 +82,11 @@ def getModuleItemList(user=None, portal_path=None):\n
     for module_id in portal.objectIds(\'ERP5 Folder\'):\n
       try:\n
         module = portal[module_id]\n
-        url = module.getPath()\n
-        label = module.getTitleOrId()\n
-        label = gettext(label)\n
-        item_list.append((label, url))\n
+        if user.has_permission(\'View\', module):\n
+          url = module.getPath()\n
+          label = module.getTitleOrId()\n
+          label = gettext(label)\n
+          item_list.append((label, url))\n
       except ConflictError : raise\n
       except: pass\n
   except ConflictError : raise\n

product/ERP5/bootstrap/erp5_core/bt/revision

-77
+80
\ No newline at end of file