Commit 5a03f90b authored by Vincent Pelletier's avatar Vincent Pelletier

Prevent local roles from being acquired outside of Portal object.


git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@15409 20353a03-c40f-0410-a6d1-a30d3c3de9de
parent 01d96399
...@@ -208,6 +208,13 @@ class ERP5Site(FolderMixIn, CMFSite): ...@@ -208,6 +208,13 @@ class ERP5Site(FolderMixIn, CMFSite):
""" """
return self.index_html() return self.index_html()
def _getAcquireLocalRoles(self):
"""
Prevent local roles from being acquired outside of Portal object.
See ERP5Security/__init__.py:mergedLocalRoles .
"""
return False
security.declareProtected(Permissions.ManagePortal, 'enableRefererCheck') security.declareProtected(Permissions.ManagePortal, 'enableRefererCheck')
def enableRefererCheck(self): def enableRefererCheck(self):
"""Enable a ReferCheckerBeforeTraverseHook to check users have valid """Enable a ReferCheckerBeforeTraverseHook to check users have valid
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment