incubator-bloodhound-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From g..@apache.org
Subject svn commit: r1404964 - /incubator/bloodhound/trunk/bloodhound_multiproduct/multiproduct/web_ui.py
Date Fri, 02 Nov 2012 14:01:33 GMT
Author: gjm
Date: Fri Nov  2 14:01:33 2012
New Revision: 1404964

URL: http://svn.apache.org/viewvc?rev=1404964&view=rev
Log:
adjust permission checking on product views to respect PRODUCT_VIEW on a per resource basis
- towards #249

Modified:
    incubator/bloodhound/trunk/bloodhound_multiproduct/multiproduct/web_ui.py

Modified: incubator/bloodhound/trunk/bloodhound_multiproduct/multiproduct/web_ui.py
URL: http://svn.apache.org/viewvc/incubator/bloodhound/trunk/bloodhound_multiproduct/multiproduct/web_ui.py?rev=1404964&r1=1404963&r2=1404964&view=diff
==============================================================================
--- incubator/bloodhound/trunk/bloodhound_multiproduct/multiproduct/web_ui.py (original)
+++ incubator/bloodhound/trunk/bloodhound_multiproduct/multiproduct/web_ui.py Fri Nov  2 14:01:33
2012
@@ -137,6 +137,8 @@ class ProductModule(Component):
         
         req.perm.require('PRODUCT_VIEW')
         pid = req.args.get('productid', None)
+        if pid:
+            req.perm('product', pid).require('PRODUCT_VIEW')
         action = req.args.get('action', 'view')
         
         products = [p for p in Product.select(self.env)



Mime
View raw message