diff roundup/cgi/templating.py @ 3594:b5b6a6f7743a

fix bug in menu() permission filter [SF#1444440]
author Alexander Smishlajev <a1s@users.sourceforge.net>
date Thu, 09 Mar 2006 05:56:12 +0000
parents 35b35a152b40
children 1dbaa664be28
line wrap: on
line diff
--- a/roundup/cgi/templating.py	Sat Mar 04 09:04:29 2006 +0000
+++ b/roundup/cgi/templating.py	Thu Mar 09 05:56:12 2006 +0000
@@ -1762,7 +1762,7 @@
         options = [opt
             for opt in linkcl.filter(None, conditions, sort_on, (None, None))
             if self._db.security.hasPermission("View", self._client.userid,
-                linkcl.classname, itemid=id)]
+                linkcl.classname, itemid=opt)]
 
         # make sure we list the current value if it's retired
         if value and value not in options:
@@ -1948,7 +1948,7 @@
         options = [opt
             for opt in linkcl.filter(None, conditions, sort_on)
             if self._db.security.hasPermission("View", self._client.userid,
-                linkcl.classname, itemid=id)]
+                linkcl.classname, itemid=opt)]
         height = height or min(len(options), 7)
         l = ['<select multiple name="%s" size="%s">'%(self._formname, height)]
         k = linkcl.labelprop(1)

Roundup Issue Tracker: http://roundup-tracker.org/