bug #270: do not show copy/cut/delete buttons if user has no permissions.

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@31618 20353a03-c40f-0410-a6d1-a30d3c3de9de

product/ERP5/bootstrap/erp5_xhtml_style/SkinTemplateItem/portal_skins/erp5_xhtml_style/context_box_render.xml

@@ -153,9 +153,12 @@
             ui_actions actions/object_ui | nothing;\n
             print_actions actions/object_print | nothing;\n
             list_mode list_mode | nothing;\n
-            can_modify_portal_content python: portal.portal_membership.checkPermission(\'Modify portal content\', here)">\n
+            can_modify_portal_content python: portal.portal_membership.checkPermission(\'Modify portal content\', here);\n
+            can_delete_objects python: portal.portal_membership.checkPermission(\'Delete objects\', here);\n
+            can_copy_or_move python: portal.portal_membership.checkPermission(\'Copy Or Move\', here)">\n
         <span class="separator"><!--separator--></span>\n
         <tal:block tal:condition="list_mode">\n
+          <tal:block tal:condition="can_copy_or_move">\n
             <button class="cut" type="submit" name="Folder_cut:method" title="Cut"\n
                     i18n:attributes="title" i18n:domain="ui"\n
                     tal:condition="can_modify_portal_content">\n
@@ -167,6 +170,7 @@
               <span class="image"></span>\n
               <span class="description" i18n:translate="" i18n:domain="ui">Copy</span>\n
             </button>\n
+          </tal:block>\n
           <button class="paste" type="submit" name="Folder_paste:method" title="Paste"\n
                   i18n:attributes="title" i18n:domain="ui">\n
             <span class="image"></span>\n
@@ -192,7 +196,8 @@
           <span class="image"></span>\n
           <span class="description" i18n:translate="" i18n:domain="ui">Clone</span>\n
         </button>\n
-        <button tal:condition="list_mode" class="delete" type="submit" name="Folder_deleteObjectList:method" title="Delete"\n
+        <button tal:condition="python: list_mode and can_delete_objects" class="delete" type="submit" \n
+                name="Folder_deleteObjectList:method" title="Delete"\n
                 i18n:attributes="title" i18n:domain="ui">\n
           <span class="image"></span>\n
           <span class="description" i18n:translate="" i18n:domain="ui">Delete</span>\n

product/ERP5/bootstrap/erp5_xhtml_style/bt/change_log

 2010-01-07 Nicolas Dumazet
 * Dont show a New button if there are no Visible Allowed Content Types
+* Do not show Cut/Paste button if no "Copy or Move" permission
+* Do not show Delete button if no "Delete objects" permission
 
 2009-12-11 Kazuhiko
 * update FCKeditor to 2.6.5.

product/ERP5/bootstrap/erp5_xhtml_style/bt/revision

-861
\ No newline at end of file
+862
\ No newline at end of file