[Zope-CMF] Proposed default workflow policy change

[Tres Seaver]

Jeff Sasmor wrote:
> 
> I disagree, too.
> 
> What would be nice would be to change the default workflow
> so that **Determining** the state of an object would be
> publicly accessible.  Right now AFAIK that only is possible
> for the owner of a CMF content type (or a manager or a
> reviewer).
> 
> If two lines in CMFDefault/DefaultWorkflow were changed
> (lines 287 and 288)
>      allow_review = _checkPermission('Review portal content', ob)
>      allow_request = _checkPermission('Request review', ob)

Not on the CVS trunk:  the lines before that:

    # Treat this as public.
    if name == 'review_state':
        return self.getReviewStateOf(ob)

return the 'review_state' information regardless of roles.
The permission checks guard the rest of the information
('review_history', in this case) which is quite appropriate.

Tres.
-- 
===============================================================
Tres Seaver                                tseaver@digicool.com
Digital Creations     "Zope Dealers"       http://www.zope.org