VCS: Allow developer to store working copies outside of instance home

product/ERP5VCS/WorkingCopy.py

@@ -34,6 +34,7 @@ from base64 import b64encode, b64decode
 from tempfile import gettempdir
 import transaction
 from AccessControl import Unauthorized
+from AccessControl.SecurityManagement import getSecurityManager
 from AccessControl.SecurityInfo import ModuleSecurityInfo
 from Acquisition import aq_base, Implicit
 from App.config import getConfiguration
@@ -128,8 +129,10 @@ class WorkingCopy(Implicit):
     for allowed in getConfiguration().instancehome, gettempdir():
       if issubdir(allowed, path) or issubdir(allowed, real_path):
         return real_path
+    if 'Developer' not in getSecurityManager().getUser().getRoles():
       raise Unauthorized("Unauthorized access to path %r."
                          " It is NOT in your Zope home instance." % path)
+    return real_path
 
   def _getCookie(self, name, default=None):
     try: