2009-04-17 Seb

* Fixed some security issue related to portal_membership

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@26481 20353a03-c40f-0410-a6d1-a30d3c3de9de

bt5/erp5_project/SkinTemplateItem/portal_skins/erp5_project/TaskReport_copyOrderPropertiesAndNotifyAssignee.xml

@@ -94,8 +94,7 @@ if source_person is not None \\\n
      and destination_decision_person is not None \\\n
      and destination_decision_person.getDefaultEmailText() \\\n
      and destination_decision_person.getReference():\n
-  source_user = portal.portal_membership.getMemberById(source_person.getReference())\n
-  if source_user is not None:\n
+  if len(portal.acl_users.erp5_users.getUserByLogin(source_person.getReference())):\n
     message = """A new task has been assigned to you by %(assignor)s.\n
 \n
 This task is named: %(title)s\n
@@ -191,7 +190,7 @@ task_report.activate(after_path_and_method_id=(related_simulation_movement_path_
                             <string>related_order</string>
                             <string>source_person</string>
                             <string>destination_decision_person</string>
-                            <string>source_user</string>
+                            <string>len</string>
                             <string>message</string>
                             <string>confirm_tag</string>
                           </tuple>

bt5/erp5_project/bt/revision

-630
+631
\ No newline at end of file