changeset 3594:b5b6a6f7743a

fix bug in menu() permission filter [SF#1444440]
author Alexander Smishlajev <a1s@users.sourceforge.net>
date Thu, 09 Mar 2006 05:56:12 +0000
parents 3d9e1906ba58
children 311ad623e2d1
files CHANGES.txt roundup/cgi/templating.py
diffstat 2 files changed, 3 insertions(+), 2 deletions(-) [+]
line wrap: on
line diff
--- a/CHANGES.txt	Sat Mar 04 09:04:29 2006 +0000
+++ b/CHANGES.txt	Thu Mar 09 05:56:12 2006 +0000
@@ -4,6 +4,7 @@
 2006-??-?? 1.1.2
 Fixed:
 - progress display in roundup-admin reindex
+- bug in menu() permission filter (sf bug 1444440)
 
 
 2006-03-03 1.1.1
--- a/roundup/cgi/templating.py	Sat Mar 04 09:04:29 2006 +0000
+++ b/roundup/cgi/templating.py	Thu Mar 09 05:56:12 2006 +0000
@@ -1762,7 +1762,7 @@
         options = [opt
             for opt in linkcl.filter(None, conditions, sort_on, (None, None))
             if self._db.security.hasPermission("View", self._client.userid,
-                linkcl.classname, itemid=id)]
+                linkcl.classname, itemid=opt)]
 
         # make sure we list the current value if it's retired
         if value and value not in options:
@@ -1948,7 +1948,7 @@
         options = [opt
             for opt in linkcl.filter(None, conditions, sort_on)
             if self._db.security.hasPermission("View", self._client.userid,
-                linkcl.classname, itemid=id)]
+                linkcl.classname, itemid=opt)]
         height = height or min(len(options), 7)
         l = ['<select multiple name="%s" size="%s">'%(self._formname, height)]
         k = linkcl.labelprop(1)

Roundup Issue Tracker: http://roundup-tracker.org/