From f1ee5b02b26eee33add5658a7b1a9e76c67276d8 Mon Sep 17 00:00:00 2001 From: Romain Courteaud <romain@nexedi.com> Date: Tue, 19 Sep 2006 10:59:03 +0000 Subject: [PATCH] Do not use the proxy role Manager on Folder_delete, as it can permit to all users to delete objects. git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@10143 20353a03-c40f-0410-a6d1-a30d3c3de9de --- .../SkinTemplateItem/portal_skins/erp5_core/Folder_delete.xml | 4 +--- product/ERP5/bootstrap/erp5_core/bt/revision | 2 +- 2 files changed, 2 insertions(+), 4 deletions(-) diff --git a/product/ERP5/bootstrap/erp5_core/SkinTemplateItem/portal_skins/erp5_core/Folder_delete.xml b/product/ERP5/bootstrap/erp5_core/SkinTemplateItem/portal_skins/erp5_core/Folder_delete.xml index ad66e6bcaa..5cb3c59753 100644 --- a/product/ERP5/bootstrap/erp5_core/SkinTemplateItem/portal_skins/erp5_core/Folder_delete.xml +++ b/product/ERP5/bootstrap/erp5_core/SkinTemplateItem/portal_skins/erp5_core/Folder_delete.xml @@ -236,9 +236,7 @@ return REQUEST.RESPONSE.redirect("%s%s" % (ret_url, qs))\n <item> <key> <string>_proxy_roles</string> </key> <value> - <tuple> - <string>Manager</string> - </tuple> + <tuple/> </value> </item> <item> diff --git a/product/ERP5/bootstrap/erp5_core/bt/revision b/product/ERP5/bootstrap/erp5_core/bt/revision index d7765fe47e..9cd72aa941 100644 --- a/product/ERP5/bootstrap/erp5_core/bt/revision +++ b/product/ERP5/bootstrap/erp5_core/bt/revision @@ -1 +1 @@ -70 \ No newline at end of file +72 \ No newline at end of file -- 2.30.9