Skip to content

erp5
erp5
Commit afd3e061 authored by Sebastien Robin's avatar Sebastien Robin
Browse files
Options

erp5_configurator_standard_solver: acquire permissions like portal types to avoid security issues

parent be7b48f9
Show whitespace changes
Inline Side-by-side
Showing with 67 additions and 25 deletions
bt5/erp5_configurator_standard_solver/PathTemplateItem/portal_solvers/Accept%20Solver.xml
View file @ afd3e061
......@@ -9,7 +9,7 @@
<item>
<key> <string>_Access_contents_information_Permission</string> </key>
<value>
<tuple>
<list>
<string>Assignee</string>
<string>Assignor</string>
<string>Associate</string>
......@@ -17,7 +17,7 @@
<string>Author</string>
<string>Manager</string>
<string>Owner</string>
</tuple>
</list>
</value>
</item>
<item>
......@@ -36,20 +36,20 @@
<item>
<key> <string>_Modify_portal_content_Permission</string> </key>
<value>
<tuple>
<list>
<string>Assignee</string>
<string>Assignor</string>
<string>Associate</string>
<string>Author</string>
<string>Manager</string>
<string>Owner</string>
</tuple>
</list>
</value>
</item>
<item>
<key> <string>_View_Permission</string> </key>
<value>
<tuple>
<list>
<string>Assignee</string>
<string>Assignor</string>
<string>Associate</string>
......@@ -57,7 +57,7 @@
<string>Author</string>
<string>Manager</string>
<string>Owner</string>
</tuple>
</list>
</value>
</item>
<item>
......@@ -67,17 +67,29 @@
</value>
</item>
<item>
<key> <string>_mt_index</string> </key>
<key> <string>_identity_criterion</string> </key>
<value>
<persistent> <string encoding="base64">AAAAAAAAAAM=</string> </persistent>
</value>
</item>
<item>
<key> <string>_tree</string> </key>
<key> <string>_mt_index</string> </key>
<value>
<persistent> <string encoding="base64">AAAAAAAAAAQ=</string> </persistent>
</value>
</item>
<item>
<key> <string>_range_criterion</string> </key>
<value>
<persistent> <string encoding="base64">AAAAAAAAAAU=</string> </persistent>
</value>
</item>
<item>
<key> <string>_tree</string> </key>
<value>
<persistent> <string encoding="base64">AAAAAAAAAAY=</string> </persistent>
</value>
</item>
<item>
<key> <string>acquire_local_roles</string> </key>
<value> <int>1</int> </value>
......@@ -124,10 +136,6 @@
<none/>
</value>
</item>
<item>
<key> <string>last_id</string> </key>
<value> <string>2</string> </value>
</item>
<item>
<key> <string>line_exclusive</string> </key>
<value> <int>0</int> </value>
......@@ -150,6 +158,10 @@
<key> <string>solver_action_title</string> </key>
<value> <string>Accept new value</string> </value>
</item>
<item>
<key> <string>type_class</string> </key>
<value> <string>AcceptSolver</string> </value>
</item>
</dictionary>
</pickle>
</record>
......@@ -160,6 +172,21 @@
<pickle> <int>0</int> </pickle>
</record>
<record id="3" aka="AAAAAAAAAAM=">
<pickle>
<global name="PersistentMapping" module="Persistence.mapping"/>
</pickle>
<pickle>
<dictionary>
<item>
<key> <string>data</string> </key>
<value>
<dictionary/>
</value>
</item>
</dictionary>
</pickle>
</record>
<record id="4" aka="AAAAAAAAAAQ=">
<pickle>
<global name="OOBTree" module="BTrees.OOBTree"/>
</pickle>
......@@ -167,7 +194,22 @@
<none/>
</pickle>
</record>
<record id="4" aka="AAAAAAAAAAQ=">
<record id="5" aka="AAAAAAAAAAU=">
<pickle>
<global name="PersistentMapping" module="Persistence.mapping"/>
</pickle>
<pickle>
<dictionary>
<item>
<key> <string>data</string> </key>
<value>
<dictionary/>
</value>
</item>
</dictionary>
</pickle>
</record>
<record id="6" aka="AAAAAAAAAAY=">
<pickle>
<global name="OOBTree" module="BTrees.OOBTree"/>
</pickle>
......
bt5/erp5_configurator_standard_solver/PathTemplateItem/portal_solvers/Adopt%20Solver.xml
View file @ afd3e061
......@@ -9,7 +9,7 @@
<item>
<key> <string>_Access_contents_information_Permission</string> </key>
<value>
<tuple>
<list>
<string>Assignee</string>
<string>Assignor</string>
<string>Associate</string>
......@@ -17,39 +17,39 @@
<string>Author</string>
<string>Manager</string>
<string>Owner</string>
</tuple>
</list>
</value>
</item>
<item>
<key> <string>_Add_portal_content_Permission</string> </key>
<value>
<tuple>
<list>
<string>Assignee</string>
<string>Assignor</string>
<string>Associate</string>
<string>Author</string>
<string>Manager</string>
<string>Owner</string>
</tuple>
</list>
</value>
</item>
<item>
<key> <string>_Modify_portal_content_Permission</string> </key>
<value>
<tuple>
<list>
<string>Assignee</string>
<string>Assignor</string>
<string>Associate</string>
<string>Author</string>
<string>Manager</string>
<string>Owner</string>
</tuple>
</list>
</value>
</item>
<item>
<key> <string>_View_Permission</string> </key>
<value>
<tuple>
<list>
<string>Assignee</string>
<string>Assignor</string>
<string>Associate</string>
......@@ -57,7 +57,7 @@
<string>Author</string>
<string>Manager</string>
<string>Owner</string>
</tuple>
</list>
</value>
</item>
<item>
......@@ -137,10 +137,6 @@
<none/>
</value>
</item>
<item>
<key> <string>last_id</string> </key>
<value> <string>2</string> </value>
</item>
<item>
<key> <string>permission</string> </key>
<value>
......@@ -155,6 +151,10 @@
<key> <string>solver_action_title</string> </key>
<value> <string>Replace value</string> </value>
</item>
<item>
<key> <string>type_class</string> </key>
<value> <string>AdoptSolver</string> </value>
</item>
</dictionary>
</pickle>
</record>
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment
GitLab Nexedi Edition | About GitLab | About Nexedi | 沪ICP备2021021310号-2 | 沪ICP备2021021310号-7