comparison roundup/xmlrpc.py @ 4311:7291130fad82

- fix create permission for xmlrpc, too
author Ralf Schlatterbeck <schlatterbeck@users.sourceforge.net>
date Mon, 21 Dec 2009 21:03:24 +0000
parents 712549bb7fe5
children 2188c9de5bdd
comparison
equal deleted inserted replaced
4310:8e0d350ce644 4311:7291130fad82
111 key = cl.getkey() 111 key = cl.getkey()
112 if key and not props.has_key(key): 112 if key and not props.has_key(key):
113 raise UsageError, 'you must provide the "%s" property.'%key 113 raise UsageError, 'you must provide the "%s" property.'%key
114 114
115 for key in props: 115 for key in props:
116 if not self.db.security.hasPermission('Edit', self.db.getuid(), classname, 116 if not self.db.security.hasPermission('Create', self.db.getuid(),
117 property=key): 117 classname, property=key):
118 raise Unauthorised('Permission to set %s.%s denied'%(classname, key)) 118 raise Unauthorised('Permission to create %s.%s denied'%(classname, key))
119 119
120 # do the actual create 120 # do the actual create
121 try: 121 try:
122 result = cl.create(**props) 122 result = cl.create(**props)
123 self.db.commit() 123 self.db.commit()

Roundup Issue Tracker: http://roundup-tracker.org/