Treat user with Manager role as superuser.

product/ERP5Catalog/CatalogTool.py

@@ -623,6 +623,8 @@ class CatalogTool (UniqueObject, ZCatalog, CMFCoreCatalogTool, ActiveObject):
       user = _getAuthenticatedUser(self)
       user_str = user.getIdOrUserName()
       user_is_superuser = (user == system_user) or (user_str == ERP5Security.SUPER_USER)
+      user_is_superuser = (user == system_user) or (user_str == ERP5Security.SUPER_USER) or \
+          ('Manager' in user.getRoles())
       allowedRolesAndUsers = self._listAllowedRolesAndUsers(user)
       role_column_dict = {}
       local_role_column_dict = {}
@@ -747,7 +749,8 @@ class CatalogTool (UniqueObject, ZCatalog, CMFCoreCatalogTool, ActiveObject):
       """
       user = _getAuthenticatedUser(self)
       user_str = user.getIdOrUserName()
-      user_is_superuser = (user == system_user) or (user_str == ERP5Security.SUPER_USER)
+      user_is_superuser = (user == system_user) or (user_str == ERP5Security.SUPER_USER) or \
+          ('Manager' in user.getRoles())
       if user_is_superuser:
         # We need no security check for super user.
         return