Commit 44bb93d7 authored by Sebastien Robin's avatar Sebastien Robin

ERP5Type: getObject method should be protected by AccessContentsInformation

It happens for some objects that we don't allow the user to see them, even though
we might allows them to get some informations. Typically an object that they
should not see in a module but that could be used for some purposes.
parent 1e5c9302
......@@ -1567,7 +1567,7 @@ class Base( CopyContainer,
return list(result)
# Catalog Related
security.declareProtected( Permissions.View, 'getObject' )
security.declareProtected( Permissions.AccessContentsInformation, 'getObject' )
def getObject(self, relative_url = None, REQUEST=None):
"""
Returns self - useful for ListBox when we do not know
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment