diff roundup/cgi/templating.py @ 3535:75dc225613cc

fix security check for hasPermission(Permission, None) add hasRole to HTMLUser
author Richard Jones <richard@users.sourceforge.net>
date Fri, 03 Feb 2006 04:04:37 +0000
parents dcaa366b2cc8
children f6719836e521
line wrap: on
line diff
--- a/roundup/cgi/templating.py	Fri Feb 03 03:49:24 2006 +0000
+++ b/roundup/cgi/templating.py	Fri Feb 03 04:04:37 2006 +0000
@@ -1119,9 +1119,16 @@
         '''
         if classname is self._marker:
             classname = self._client.classname
-        return self._client.db.security.hasPermission(permission,
+        return self._db.security.hasPermission(permission,
             self._nodeid, classname, property, itemid)
 
+    def hasRole(self, rolename):
+        '''Determine whether the user has the Role.'''
+        roles = self._db.user.get(self._nodeid, 'roles').split(',')
+        for role in roles:
+            if role.strip() == rolename: return True
+        return False
+
 def HTMLItem(client, classname, nodeid, anonymous=0):
     if classname == 'user':
         return _HTMLUser(client, classname, nodeid, anonymous)

Roundup Issue Tracker: http://roundup-tracker.org/