From 48ccfc36b2303ce0098477e554ba06820ab9bd98 Mon Sep 17 00:00:00 2001
From: Wenjie Zheng <wenjie.zheng@tiolive.com>
Date: Wed, 10 Jun 2015 12:49:32 +0000
Subject: [PATCH] erp5_workflow: convertWorkflow use a function to assign
converted workflow to avoid security issue.
---
.../erp5_workflow/WorkflowTool_convertWorkflow.xml | 3 +--
1 file changed, 1 insertion(+), 2 deletions(-)
diff --git a/bt5/erp5_workflow/SkinTemplateItem/portal_skins/erp5_workflow/WorkflowTool_convertWorkflow.xml b/bt5/erp5_workflow/SkinTemplateItem/portal_skins/erp5_workflow/WorkflowTool_convertWorkflow.xml
index 147958805b..40b088177c 100644
--- a/bt5/erp5_workflow/SkinTemplateItem/portal_skins/erp5_workflow/WorkflowTool_convertWorkflow.xml
+++ b/bt5/erp5_workflow/SkinTemplateItem/portal_skins/erp5_workflow/WorkflowTool_convertWorkflow.xml
@@ -96,8 +96,7 @@ for dc_wf in selected_wf_list:\n
# 2. assign ERP5 Workflow to portal type:\n
type_erp5workflow_list = ptype.getTypeERP5WorkflowList()\n
if workflow.getId() not in type_erp5workflow_list:\n
- type_erp5workflow_list.append(workflow.getId())\n
- ptype.erp5workflow_list = type_erp5workflow_list\n
+ ptype.addTypeERP5WorkflowList(workflow.getId())\n
\n
return RESPONSE.redirect("%s/view?portal_status_message=Workflow+%s+converted"\n
%(context.absolute_url(), \',+\'.join(selected_wf_id_list)))\n
--
2.30.9