[Zope-Checkins] SVN: Zope/trunk/ - LP #143722: Added missing permission to ObjectManager.manage_hasId,
Jens Vagelpohl
jens at dataflake.org
Wed Jul 14 08:11:11 EDT 2010
Log message for revision 114739:
- LP #143722: Added missing permission to ObjectManager.manage_hasId,
which prevented renaming files and folders via FTP.
Changed:
U Zope/trunk/doc/CHANGES.rst
U Zope/trunk/src/OFS/ObjectManager.py
-=-
Modified: Zope/trunk/doc/CHANGES.rst
===================================================================
--- Zope/trunk/doc/CHANGES.rst 2010-07-14 12:08:07 UTC (rev 114738)
+++ Zope/trunk/doc/CHANGES.rst 2010-07-14 12:11:11 UTC (rev 114739)
@@ -11,6 +11,9 @@
Bugs Fixed
++++++++++
+- LP #143722: Added missing permission to ObjectManager.manage_hasId,
+ which prevented renaming files and folders via FTP.
+
- LP #143564: Request.resolve_url did not correctly re-raise
exceptions encountered during path traversal.
Modified: Zope/trunk/src/OFS/ObjectManager.py
===================================================================
--- Zope/trunk/src/OFS/ObjectManager.py 2010-07-14 12:08:07 UTC (rev 114738)
+++ Zope/trunk/src/OFS/ObjectManager.py 2010-07-14 12:11:11 UTC (rev 114739)
@@ -726,6 +726,7 @@
out=out+((k,stat),)
return marshal.dumps(out)
+ security.declareProtected(ftp_access, 'manage_hasId')
def manage_hasId(self, REQUEST):
""" check if the folder has an object with REQUEST['id'] """
More information about the Zope-Checkins
mailing list