Commit 384d16d7 authored by Sebastien Robin's avatar Sebastien Robin

2009-04-17 Seb

* Fixed some security issue related to portal_membership

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@26481 20353a03-c40f-0410-a6d1-a30d3c3de9de
parent 556b32d3
......@@ -94,8 +94,7 @@ if source_person is not None \\\n
and destination_decision_person is not None \\\n
and destination_decision_person.getDefaultEmailText() \\\n
and destination_decision_person.getReference():\n
source_user = portal.portal_membership.getMemberById(source_person.getReference())\n
if source_user is not None:\n
if len(portal.acl_users.erp5_users.getUserByLogin(source_person.getReference())):\n
message = """A new task has been assigned to you by %(assignor)s.\n
\n
This task is named: %(title)s\n
......@@ -191,7 +190,7 @@ task_report.activate(after_path_and_method_id=(related_simulation_movement_path_
<string>related_order</string>
<string>source_person</string>
<string>destination_decision_person</string>
<string>source_user</string>
<string>len</string>
<string>message</string>
<string>confirm_tag</string>
</tuple>
......
630
\ No newline at end of file
631
\ No newline at end of file
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment