Skip to content

erp5
erp5
Commit 714ef8dc authored by Aurel's avatar Aurel
Browse files
Options

fix security on wf state 

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@17057 20353a03-c40f-0410-a6d1-a30d3c3de9de
parent 08fc9d47
Hide whitespace changes
Inline Side-by-side
Showing with 74 additions and 3 deletions
bt5/erp5_banking_cash/WorkflowTemplateItem/portal_workflow/mutilated_banknote_workflow/states/cancelled.xml
View file @ 714ef8dc
...@@ -29,6 +29,12 @@ ...@@ -29,6 +29,12 @@
<key> <string>id</string> </key> <key> <string>id</string> </key>
<value> <string>cancelled</string> </value> <value> <string>cancelled</string> </value>
</item> </item>
<item>
<key> <string>permission_roles</string> </key>
<value>
<persistent> <string encoding="base64">AAAAAAAAAAI=</string> </persistent>
</value>
</item>
<item> <item>
<key> <string>title</string> </key> <key> <string>title</string> </key>
<value> <string>Cancelled</string> </value> <value> <string>Cancelled</string> </value>
...@@ -48,4 +54,71 @@ ...@@ -48,4 +54,71 @@
</dictionary> </dictionary>
</pickle> </pickle>
</record> </record>
<record id="2" aka="AAAAAAAAAAI=">
<pickle>
<tuple>
<global name="PersistentMapping" module="Persistence.mapping"/>
<tuple/>
</tuple>
</pickle>
<pickle>
<dictionary>
<item>
<key> <string>data</string> </key>
<value>
<dictionary>
<item>
<key> <string>Access contents information</string> </key>
<value>
<tuple>
<string>Assignee</string>
<string>Assignor</string>
<string>DestinationAssignor</string>
<string>Manager</string>
<string>Reviewer</string>
</tuple>
</value>
</item>
<item>
<key> <string>Add portal content</string> </key>
<value>
<tuple>
<string>Manager</string>
</tuple>
</value>
</item>
<item>
<key> <string>Delete objects</string> </key>
<value>
<tuple>
<string>Manager</string>
</tuple>
</value>
</item>
<item>
<key> <string>Modify portal content</string> </key>
<value>
<tuple>
<string>Manager</string>
</tuple>
</value>
</item>
<item>
<key> <string>View</string> </key>
<value>
<tuple>
<string>Assignee</string>
<string>Assignor</string>
<string>DestinationAssignor</string>
<string>Manager</string>
<string>Reviewer</string>
</tuple>
</value>
</item>
</dictionary>
</value>
</item>
</dictionary>
</pickle>
</record>
</ZopeData> </ZopeData>
bt5/erp5_banking_cash/WorkflowTemplateItem/portal_workflow/mutilated_banknote_workflow/states/delivered.xml
View file @ 714ef8dc
...@@ -67,7 +67,6 @@ ...@@ -67,7 +67,6 @@
<tuple> <tuple>
<string>Assignee</string> <string>Assignee</string>
<string>Assignor</string> <string>Assignor</string>
<string>Auditor</string>
<string>DestinationAssignor</string> <string>DestinationAssignor</string>
<string>Manager</string> <string>Manager</string>
<string>Reviewer</string> <string>Reviewer</string>
...@@ -98,7 +97,6 @@ ...@@ -98,7 +97,6 @@
<tuple> <tuple>
<string>Assignee</string> <string>Assignee</string>
<string>Assignor</string> <string>Assignor</string>
<string>Auditor</string>
<string>DestinationAssignor</string> <string>DestinationAssignor</string>
<string>Manager</string> <string>Manager</string>
<string>Reviewer</string> <string>Reviewer</string>
......
bt5/erp5_banking_cash/bt/revision
View file @ 714ef8dc
523 524
\ No newline at end of file \ No newline at end of file
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment
GitLab Nexedi Edition | About GitLab | About Nexedi | 沪ICP备2021021310号-2 | 沪ICP备2021021310号-7