diff --git a/bt5/erp5_base/WorkflowTemplateItem/portal_workflow/reindex_object_interaction_workflow/scripts/callRecursiveReindexObject.xml b/bt5/erp5_base/WorkflowTemplateItem/portal_workflow/reindex_object_interaction_workflow/scripts/callRecursiveReindexObject.xml
index 6de420570f04ce338c8633c90e6ffeed39d97013..3835763507af23ed24cde7634c4d46307f3d9a93 100644
--- a/bt5/erp5_base/WorkflowTemplateItem/portal_workflow/reindex_object_interaction_workflow/scripts/callRecursiveReindexObject.xml
+++ b/bt5/erp5_base/WorkflowTemplateItem/portal_workflow/reindex_object_interaction_workflow/scripts/callRecursiveReindexObject.xml
@@ -64,6 +64,14 @@ context.recursiveReindexObject()\n
             <key> <string>_params</string> </key>
             <value> <string>state_change</string> </value>
         </item>
+        <item>
+            <key> <string>_proxy_roles</string> </key>
+            <value>
+              <tuple>
+                <string>Manager</string>
+              </tuple>
+            </value>
+        </item>
         <item>
             <key> <string>errors</string> </key>
             <value>
diff --git a/bt5/erp5_base/bt/change_log b/bt5/erp5_base/bt/change_log
index d76f08c11632732e3270a038de4abdcb9e0a92eb..4db6425e9188d548f264e06003f6ad156b9380af 100644
--- a/bt5/erp5_base/bt/change_log
+++ b/bt5/erp5_base/bt/change_log
@@ -1,3 +1,6 @@
+2010-11-29 lucas
+* Added proxy role in reindex_object_interaction_workflow/scripts/callRecursiveReindexObject to avoid security issues.
+
 2010-11-15 Kazuhiko
 * improve Document_getStandardFileName so that the extention in the original filename will be used as the fallback.
 
diff --git a/bt5/erp5_base/bt/revision b/bt5/erp5_base/bt/revision
index 8ffdba9a31b940d81f3d1bcf142c4955d7c5ac8b..c3398755eabd3b3f37f2732311a3e82c082ac675 100644
--- a/bt5/erp5_base/bt/revision
+++ b/bt5/erp5_base/bt/revision
@@ -1 +1 @@
-900
\ No newline at end of file
+901
\ No newline at end of file