diff templates/classic/html/issue.item.html @ 3117:460eb0209a9e

Permissions improvements. - have Permissions only test the check function if itemid is suppled - modify index templates to check for row-level Permission - more documentation of security mechanisms - better unit tests for security mechanisms
author Richard Jones <richard@users.sourceforge.net>
date Fri, 28 Jan 2005 03:51:19 +0000
parents bca5de92aaa3
children 8fc73650925f
line wrap: on
line diff
--- a/templates/classic/html/issue.item.html	Wed Jan 26 17:27:21 2005 +0000
+++ b/templates/classic/html/issue.item.html	Fri Jan 28 03:51:19 2005 +0000
@@ -25,8 +25,14 @@
 
 <td class="content" metal:fill-slot="content">
 
-<form method="POST" name="itemSynopsis" onSubmit="return submit_once()"
-      enctype="multipart/form-data" tal:attributes="action context/designator">
+<p tal:condition="not:context/is_view_ok" i18n:translate="">You are not
+    allowed to view this page.</p>
+
+<div tal:condition="context/is_view_ok">
+
+<form method="POST" name="itemSynopsis"
+      onSubmit="return submit_once()" enctype="multipart/form-data"
+      tal:attributes="action context/designator">
 
 <table class="form">
 <tr>
@@ -176,6 +182,8 @@
 
 <tal:block tal:condition="context/id" tal:replace="structure context/history" />
 
+</div>
+
 </td>
 
 </tal:block>

Roundup Issue Tracker: http://roundup-tracker.org/