Commit 48ccfc36 authored by wenjie.zheng's avatar wenjie.zheng Committed by Sebastien Robin

erp5_workflow: convertWorkflow use a function to assign converted workflow to avoid security issue.

parent b8bd1d49
......@@ -96,8 +96,7 @@ for dc_wf in selected_wf_list:\n
# 2. assign ERP5 Workflow to portal type:\n
type_erp5workflow_list = ptype.getTypeERP5WorkflowList()\n
if workflow.getId() not in type_erp5workflow_list:\n
type_erp5workflow_list.append(workflow.getId())\n
ptype.erp5workflow_list = type_erp5workflow_list\n
ptype.addTypeERP5WorkflowList(workflow.getId())\n
\n
return RESPONSE.redirect("%s/view?portal_status_message=Workflow+%s+converted"\n
%(context.absolute_url(), \',+\'.join(selected_wf_id_list)))\n
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment