Commit a62ea567 authored by Łukasz Nowak's avatar Łukasz Nowak

- restrict fetched documents to those on which user has access

   permission


git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@36888 20353a03-c40f-0410-a6d1-a30d3c3de9de
parent 88a0dffd
...@@ -108,7 +108,8 @@ def getIsSourceMovementItemList(invoice):\n ...@@ -108,7 +108,8 @@ def getIsSourceMovementItemList(invoice):\n
movement_item_list = [(is_source, m) for m in invoice.getMovementList(\n movement_item_list = [(is_source, m) for m in invoice.getMovementList(\n
portal_type=portal.getPortalAccountingMovementTypeList())]\n portal_type=portal.getPortalAccountingMovementTypeList())]\n
for btt in context.getCausalityRelatedValueList(\n for btt in context.getCausalityRelatedValueList(\n
portal_type=\'Balance Transfer Transaction\'):\n portal_type=\'Balance Transfer Transaction\',\n
checked_permission=\'Access contents information\'):\n
if simulation_state and btt.getSimulationState() not in simulation_state:\n if simulation_state and btt.getSimulationState() not in simulation_state:\n
continue\n continue\n
btt_is_source = btt.AccountingTransaction_isSourceView()\n btt_is_source = btt.AccountingTransaction_isSourceView()\n
...@@ -156,7 +157,8 @@ for is_source, line in getIsSourceMovementItemList(context):\n ...@@ -156,7 +157,8 @@ for is_source, line in getIsSourceMovementItemList(context):\n
\n \n
\n \n
related_transaction_list = context.getCausalityRelatedValueList(\n related_transaction_list = context.getCausalityRelatedValueList(\n
portal_type=accounting_transaction_type_list)\n portal_type=accounting_transaction_type_list,\n
checked_permission=\'Access contents information\')\n
\n \n
# substract all causalities\n # substract all causalities\n
for related_transaction in related_transaction_list:\n for related_transaction in related_transaction_list:\n
......
1298 1299
\ No newline at end of file \ No newline at end of file
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment