diff --git a/product/ERP5Form/PreferenceTool.py b/product/ERP5Form/PreferenceTool.py index 12e074090f935372eeb937100f9d65660e3cae21..9afd5ba9df46f63a9d0a3b2319024d9f5d489533 100755 --- a/product/ERP5Form/PreferenceTool.py +++ b/product/ERP5Form/PreferenceTool.py @@ -59,7 +59,15 @@ class PreferenceTool(BaseTool): manage_options = ( BaseTool.manage_options + ( { 'label' : 'User Groups Preferences' , 'action' : 'manage_group_preferences'},)) - __ac_permissions__ = ((Permissions.AddPortalContent, [], ['Member']),) + + security.declarePrivate('manage_afterAdd') + def manage_afterAdd(self, item, container) : + """ init the permissions right after creation """ + item.manage_permission(Permissions.AddPortalContent, + ['Member', 'Author', 'Manager']) + item.manage_permission(Permissions.View, + ['Member', 'Auditor', 'Manager']) + BaseTool.inheritedAttribute('manage_afterAdd')(self, item, container) def _aq_dynamic(self, name): """ if the name is a valid preference, then start a lookup on