Commit f8bdb7e7 authored by Jérome Perrin's avatar Jérome Perrin

documents are protected by AccessContentsInformation, not View


git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@22316 20353a03-c40f-0410-a6d1-a30d3c3de9de
parent 8a7c0eb3
...@@ -62,4 +62,5 @@ class Budget(Predicate): ...@@ -62,4 +62,5 @@ class Budget(Predicate):
# Declarative security # Declarative security
security = ClassSecurityInfo() security = ClassSecurityInfo()
security.declareObjectProtected(Permissions.View) security.declareObjectProtected(Permissions.AccessContentsInformation)
...@@ -68,7 +68,7 @@ class BudgetCell(Predicate, MetaNode): ...@@ -68,7 +68,7 @@ class BudgetCell(Predicate, MetaNode):
# Declarative security # Declarative security
security = ClassSecurityInfo() security = ClassSecurityInfo()
security.declareObjectProtected(Permissions.View) security.declareObjectProtected(Permissions.AccessContentsInformation)
security.declareProtected(Permissions.View, 'getTitle') security.declareProtected(Permissions.View, 'getTitle')
def getTitle(self): def getTitle(self):
......
...@@ -68,4 +68,4 @@ class BudgetLine(Predicate, XMLMatrix, Variated): ...@@ -68,4 +68,4 @@ class BudgetLine(Predicate, XMLMatrix, Variated):
# Declarative security # Declarative security
security = ClassSecurityInfo() security = ClassSecurityInfo()
security.declareObjectProtected(Permissions.View) security.declareObjectProtected(Permissions.AccessContentsInformation)
...@@ -59,7 +59,8 @@ class BudgetTransaction(DeliveryLine): ...@@ -59,7 +59,8 @@ class BudgetTransaction(DeliveryLine):
# Declarative security # Declarative security
security = ClassSecurityInfo() security = ClassSecurityInfo()
security.declareObjectProtected(Permissions.View) security.declareObjectProtected(Permissions.AccessContentsInformation)
security.declareProtected(Permissions.AccessContentsInformation, security.declareProtected(Permissions.AccessContentsInformation,
'isAccountable') 'isAccountable')
......
...@@ -57,4 +57,4 @@ class BudgetTransfer(Supply): ...@@ -57,4 +57,4 @@ class BudgetTransfer(Supply):
# Declarative security # Declarative security
security = ClassSecurityInfo() security = ClassSecurityInfo()
security.declareObjectProtected(Permissions.View) security.declareObjectProtected(Permissions.AccessContentsInformation)
...@@ -58,4 +58,4 @@ class BudgetTransferLine(SupplyLine): ...@@ -58,4 +58,4 @@ class BudgetTransferLine(SupplyLine):
# Declarative security # Declarative security
security = ClassSecurityInfo() security = ClassSecurityInfo()
security.declareObjectProtected(Permissions.View) security.declareObjectProtected(Permissions.AccessContentsInformation)
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment