Commit 91064874 authored by Rafael Monnerat's avatar Rafael Monnerat

slapos_accounting: get account+section uid as shadow

   This allows the script been used with normal user security roles,
   since only account_module is cause restrict access (by the current
   usage).

   destination section can be an organisation, so use shadow to avoid
   relax security.
parent b2bfe6eb
...@@ -29,13 +29,27 @@ if first_subscription.getDestinationSection() != context.getRelativeUrl(): ...@@ -29,13 +29,27 @@ if first_subscription.getDestinationSection() != context.getRelativeUrl():
# entity is the depositor # entity is the depositor
# mirror_section_uid is the payee/recipient # mirror_section_uid is the payee/recipient
entity_uid = context.getUid() entity_uid = context.getUid()
mirror_section_uid = first_subscription.getSourceSectionUid() mirror_section = first_subscription.getSourceSection()
def getUidAsShadow(portal, mirror_section):
return (
portal.restrictedTraverse(mirror_section).getUid(),
portal.restrictedTraverse('account_module/deposit_received').getUid()
)
person = portal.portal_membership.getAuthenticatedMember().getUserValue()
if person is not None:
mirror_section_uid, deposit_received_uid = person.Person_restrictMethodAsShadowUser(
shadow_document=person,
callable_object=getUidAsShadow,
argument_list=[portal, mirror_section])
else:
mirror_section_uid, deposit_received_uid = getUidAsShadow(portal, mirror_section)
# Total received # Total received
deposit_amount = portal.portal_simulation.getInventoryAssetPrice( deposit_amount = portal.portal_simulation.getInventoryAssetPrice(
section_uid=entity_uid, section_uid=entity_uid,
mirror_section_uid=mirror_section_uid, mirror_section_uid=mirror_section_uid,
mirror_node_uid=portal.restrictedTraverse('account_module/deposit_received').getUid(), mirror_node_uid=deposit_received_uid,
#node_category_strict_membership=['account_type/income'], #node_category_strict_membership=['account_type/income'],
simulation_state= ('stopped', 'delivered'), simulation_state= ('stopped', 'delivered'),
# Do not gather deposit reimburse # Do not gather deposit reimburse
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment