Prevent local roles from being acquired outside of Portal object.

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@15409 20353a03-c40f-0410-a6d1-a30d3c3de9de

product/ERP5/ERP5Site.py

@@ -208,6 +208,13 @@ class ERP5Site(FolderMixIn, CMFSite):
     """
     return self.index_html()
 
+  def _getAcquireLocalRoles(self):
+    """
+      Prevent local roles from being acquired outside of Portal object.
+      See ERP5Security/__init__.py:mergedLocalRoles .
+    """
+    return False
+
   security.declareProtected(Permissions.ManagePortal, 'enableRefererCheck')
   def enableRefererCheck(self):
     """Enable a ReferCheckerBeforeTraverseHook to check users have valid