Mercurial > p > roundup > code
diff roundup/cgi/templating.py @ 3535:75dc225613cc
fix security check for hasPermission(Permission, None)
add hasRole to HTMLUser
| author | Richard Jones <richard@users.sourceforge.net> |
|---|---|
| date | Fri, 03 Feb 2006 04:04:37 +0000 |
| parents | dcaa366b2cc8 |
| children | f6719836e521 |
line wrap: on
line diff
--- a/roundup/cgi/templating.py Fri Feb 03 03:49:24 2006 +0000 +++ b/roundup/cgi/templating.py Fri Feb 03 04:04:37 2006 +0000 @@ -1119,9 +1119,16 @@ ''' if classname is self._marker: classname = self._client.classname - return self._client.db.security.hasPermission(permission, + return self._db.security.hasPermission(permission, self._nodeid, classname, property, itemid) + def hasRole(self, rolename): + '''Determine whether the user has the Role.''' + roles = self._db.user.get(self._nodeid, 'roles').split(',') + for role in roles: + if role.strip() == rolename: return True + return False + def HTMLItem(client, classname, nodeid, anonymous=0): if classname == 'user': return _HTMLUser(client, classname, nodeid, anonymous)
