Commit f8bdb7e7 authored by Jérome Perrin's avatar Jérome Perrin

documents are protected by AccessContentsInformation, not View


git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@22316 20353a03-c40f-0410-a6d1-a30d3c3de9de
parent 8a7c0eb3
......@@ -62,4 +62,5 @@ class Budget(Predicate):
# Declarative security
security = ClassSecurityInfo()
security.declareObjectProtected(Permissions.View)
security.declareObjectProtected(Permissions.AccessContentsInformation)
......@@ -68,7 +68,7 @@ class BudgetCell(Predicate, MetaNode):
# Declarative security
security = ClassSecurityInfo()
security.declareObjectProtected(Permissions.View)
security.declareObjectProtected(Permissions.AccessContentsInformation)
security.declareProtected(Permissions.View, 'getTitle')
def getTitle(self):
......
......@@ -68,4 +68,4 @@ class BudgetLine(Predicate, XMLMatrix, Variated):
# Declarative security
security = ClassSecurityInfo()
security.declareObjectProtected(Permissions.View)
security.declareObjectProtected(Permissions.AccessContentsInformation)
......@@ -59,7 +59,8 @@ class BudgetTransaction(DeliveryLine):
# Declarative security
security = ClassSecurityInfo()
security.declareObjectProtected(Permissions.View)
security.declareObjectProtected(Permissions.AccessContentsInformation)
security.declareProtected(Permissions.AccessContentsInformation,
'isAccountable')
......
......@@ -57,4 +57,4 @@ class BudgetTransfer(Supply):
# Declarative security
security = ClassSecurityInfo()
security.declareObjectProtected(Permissions.View)
security.declareObjectProtected(Permissions.AccessContentsInformation)
......@@ -58,4 +58,4 @@ class BudgetTransferLine(SupplyLine):
# Declarative security
security = ClassSecurityInfo()
security.declareObjectProtected(Permissions.View)
security.declareObjectProtected(Permissions.AccessContentsInformation)
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment