Skip to content

erp5
erp5
Commit ca40a848 authored by Rafael Monnerat's avatar Rafael Monnerat
Browse files
Options

Fixed some issues related to security. 

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@22950 20353a03-c40f-0410-a6d1-a30d3c3de9de
parent 68a7bb62
Show whitespace changes
Inline Side-by-side
Showing with 45 additions and 36 deletions
bt5/erp5_forge/WorkflowTemplateItem/portal_workflow/bug_event_workflow/scripts/BugEvent_buildMessage.xml
View file @ ca40a848
...@@ -90,6 +90,14 @@ bug_event.send()\n ...@@ -90,6 +90,14 @@ bug_event.send()\n
<key> <string>_params</string> </key> <key> <string>_params</string> </key>
<value> <string>state_change</string> </value> <value> <string>state_change</string> </value>
</item> </item>
<item>
<key> <string>_proxy_roles</string> </key>
<value>
<tuple>
<string>Manager</string>
</tuple>
</value>
</item>
<item> <item>
<key> <string>errors</string> </key> <key> <string>errors</string> </key>
<value> <value>
......
bt5/erp5_forge/WorkflowTemplateItem/portal_workflow/bug_event_workflow/states/draft.xml
View file @ ca40a848
...@@ -86,6 +86,7 @@ ...@@ -86,6 +86,7 @@
<tuple> <tuple>
<string>Assignee</string> <string>Assignee</string>
<string>Assignor</string> <string>Assignor</string>
<string>Auditor</string>
<string>Manager</string> <string>Manager</string>
<string>Owner</string> <string>Owner</string>
</tuple> </tuple>
...@@ -105,6 +106,7 @@ ...@@ -105,6 +106,7 @@
<tuple> <tuple>
<string>Assignee</string> <string>Assignee</string>
<string>Assignor</string> <string>Assignor</string>
<string>Auditor</string>
<string>Manager</string> <string>Manager</string>
<string>Owner</string> <string>Owner</string>
</tuple> </tuple>
......
bt5/erp5_forge/WorkflowTemplateItem/portal_workflow/bug_event_workflow/states/started.xml
View file @ ca40a848
...@@ -75,6 +75,7 @@ ...@@ -75,6 +75,7 @@
<string>Associate</string> <string>Associate</string>
<string>Auditor</string> <string>Auditor</string>
<string>Manager</string> <string>Manager</string>
<string>Owner</string>
</tuple> </tuple>
</value> </value>
</item> </item>
...@@ -117,6 +118,7 @@ ...@@ -117,6 +118,7 @@
<string>Associate</string> <string>Associate</string>
<string>Auditor</string> <string>Auditor</string>
<string>Manager</string> <string>Manager</string>
<string>Owner</string>
</tuple> </tuple>
</value> </value>
</item> </item>
......
bt5/erp5_forge/WorkflowTemplateItem/portal_workflow/bug_event_workflow/transitions/start_action.xml
View file @ ca40a848
...@@ -80,6 +80,7 @@ ...@@ -80,6 +80,7 @@
<string>Assignor</string> <string>Assignor</string>
<string>Assignee</string> <string>Assignee</string>
<string>Auditor</string> <string>Auditor</string>
<string>Owner</string>
</tuple> </tuple>
</value> </value>
</item> </item>
......
bt5/erp5_forge/WorkflowTemplateItem/portal_workflow/bug_workflow/scripts/Bug_sendNotification.xml
View file @ ca40a848
...@@ -68,23 +68,21 @@ ...@@ -68,23 +68,21 @@
<value> <string encoding="cdata"><![CDATA[ <value> <string encoding="cdata"><![CDATA[
bug = state_change["object"]\n bug = state_change["object"]\n
destination_state_title = state_change["new_state"].title\n valid_transaction_list = ["confirm_action", "stop_action", \n
person_list = []\n "deliver_action", "set_ready_action"]\n
\n \n
history = state_change.getHistory()\n message = [ h for h in state_change.getHistory() \\\n
\n if h[\'action\'] in valid_transaction_list]\n
valid_transaction_list = ["confirm_action", "stop_action", "deliver_action", "set_ready_action"]\n
\n \n
comment = ""\n comment = ""\n
message = [ h for h in history if h[\'action\'] in valid_transaction_list]\n
if len(message) > 0:\n if len(message) > 0:\n
comment=message[-1]["comment"] \n comment=message[-1]["comment"] \n
\n \n
line = bug.newContent(title="This bug was %s" % state_change["new_state"].title,\n line = bug.newContent(title="This bug was %s" % bug.getSimulationStateTitle(),\n
portal_type="Bug Line",\n portal_type="Bug Line",\n
text_content=comment)\n text_content=comment)\n
\n \n
# Call line workflow.\n # This will post The message Automatically.\n
line.start()\n line.start()\n
...@@ -112,6 +110,12 @@ line.start()\n ...@@ -112,6 +110,12 @@ line.start()\n
<key> <string>_params</string> </key> <key> <string>_params</string> </key>
<value> <string>state_change</string> </value> <value> <string>state_change</string> </value>
</item> </item>
<item>
<key> <string>_proxy_roles</string> </key>
<value>
<tuple/>
</value>
</item>
<item> <item>
<key> <string>errors</string> </key> <key> <string>errors</string> </key>
<value> <value>
...@@ -139,17 +143,14 @@ line.start()\n ...@@ -139,17 +143,14 @@ line.start()\n
<string>state_change</string> <string>state_change</string>
<string>_getitem_</string> <string>_getitem_</string>
<string>bug</string> <string>bug</string>
<string>_getattr_</string>
<string>destination_state_title</string>
<string>person_list</string>
<string>history</string>
<string>valid_transaction_list</string> <string>valid_transaction_list</string>
<string>comment</string>
<string>append</string> <string>append</string>
<string>$append0</string> <string>$append0</string>
<string>_getiter_</string> <string>_getiter_</string>
<string>_getattr_</string>
<string>h</string> <string>h</string>
<string>message</string> <string>message</string>
<string>comment</string>
<string>len</string> <string>len</string>
<string>line</string> <string>line</string>
</tuple> </tuple>
......
bt5/erp5_forge/WorkflowTemplateItem/portal_workflow/bug_workflow/states/confirmed.xml
View file @ ca40a848
...@@ -76,16 +76,11 @@ ...@@ -76,16 +76,11 @@
<string>Assignor</string> <string>Assignor</string>
<string>Associate</string> <string>Associate</string>
<string>Auditor</string> <string>Auditor</string>
<string>Manager</string>
<string>Owner</string> <string>Owner</string>
</tuple> </tuple>
</value> </value>
</item> </item>
<item>
<key> <string>Add Content Type Registrys</string> </key>
<value>
<tuple/>
</value>
</item>
<item> <item>
<key> <string>Add portal content</string> </key> <key> <string>Add portal content</string> </key>
<value> <value>
...@@ -93,6 +88,7 @@ ...@@ -93,6 +88,7 @@
<string>Assignee</string> <string>Assignee</string>
<string>Assignor</string> <string>Assignor</string>
<string>Associate</string> <string>Associate</string>
<string>Manager</string>
<string>Owner</string> <string>Owner</string>
</tuple> </tuple>
</value> </value>
...@@ -103,6 +99,7 @@ ...@@ -103,6 +99,7 @@
<tuple> <tuple>
<string>Assignee</string> <string>Assignee</string>
<string>Assignor</string> <string>Assignor</string>
<string>Manager</string>
</tuple> </tuple>
</value> </value>
</item> </item>
...@@ -114,6 +111,7 @@ ...@@ -114,6 +111,7 @@
<string>Assignor</string> <string>Assignor</string>
<string>Associate</string> <string>Associate</string>
<string>Auditor</string> <string>Auditor</string>
<string>Manager</string>
<string>Owner</string> <string>Owner</string>
</tuple> </tuple>
</value> </value>
......
bt5/erp5_forge/WorkflowTemplateItem/portal_workflow/bug_workflow/states/deleted.xml
View file @ ca40a848
...@@ -64,31 +64,33 @@ ...@@ -64,31 +64,33 @@
<item> <item>
<key> <string>Access contents information</string> </key> <key> <string>Access contents information</string> </key>
<value> <value>
<tuple/> <tuple>
</value> <string>Manager</string>
</item> </tuple>
<item>
<key> <string>Add Content Type Registrys</string> </key>
<value>
<tuple/>
</value> </value>
</item> </item>
<item> <item>
<key> <string>Add portal content</string> </key> <key> <string>Add portal content</string> </key>
<value> <value>
<tuple/> <tuple>
<string>Manager</string>
</tuple>
</value> </value>
</item> </item>
<item> <item>
<key> <string>Modify portal content</string> </key> <key> <string>Modify portal content</string> </key>
<value> <value>
<tuple/> <tuple>
<string>Manager</string>
</tuple>
</value> </value>
</item> </item>
<item> <item>
<key> <string>View</string> </key> <key> <string>View</string> </key>
<value> <value>
<tuple/> <tuple>
<string>Manager</string>
</tuple>
</value> </value>
</item> </item>
</dictionary> </dictionary>
......
bt5/erp5_forge/WorkflowTemplateItem/portal_workflow/bug_workflow/states/stopped.xml
View file @ ca40a848
...@@ -79,18 +79,13 @@ ...@@ -79,18 +79,13 @@
</tuple> </tuple>
</value> </value>
</item> </item>
<item>
<key> <string>Add Content Type Registrys</string> </key>
<value>
<tuple/>
</value>
</item>
<item> <item>
<key> <string>Add portal content</string> </key> <key> <string>Add portal content</string> </key>
<value> <value>
<tuple> <tuple>
<string>Assignee</string> <string>Assignee</string>
<string>Assignor</string> <string>Assignor</string>
<string>Manager</string>
<string>Owner</string> <string>Owner</string>
</tuple> </tuple>
</value> </value>
......
bt5/erp5_forge/bt/revision
View file @ ca40a848
301 302
\ No newline at end of file \ No newline at end of file
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment
GitLab Nexedi Edition | About GitLab | About Nexedi | 沪ICP备2021021310号-2 | 沪ICP备2021021310号-7