git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25893 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25892 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25891 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25890 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25889 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25888 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25887 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25886 20353a03-c40f-0410-a6d1-a30d3c3de9de

 - providing pre-mapped column to catalog is the only way to make a mapping explicit when mapping fails because of ambiguous choice
   -> it must not be discouraged
 - having in catalog configuration pre-mapped columns (sql_search_result_keys) is currently unavoidable
   -> it must not trigger a warning


git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25885 20353a03-c40f-0410-a6d1-a30d3c3de9de

Pass RelatedKey.buildQuery's related_key_definition and sql_catalog parameters by name to make them easier to grep for.


git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25884 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25883 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25882 20353a03-c40f-0410-a6d1-a30d3c3de9de

  This fixes failing unit tests, because what used to trigger RelatedKey.buildQuery twice no triggers it just once with a ComplexQuery as join_condition.


git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25881 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25880 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25879 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25878 20353a03-c40f-0410-a6d1-a30d3c3de9de

when filtering entity roles, take into account that an entity can have multiple roles, and multiple roles can be used in the filter

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25877 20353a03-c40f-0410-a6d1-a30d3c3de9de

Allow to produce reports by taking only accounts member of a given gap on GL, Trial Balance, Other Parties and journal

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25876 20353a03-c40f-0410-a6d1-a30d3c3de9de

When a Knowledge Pad is visible make sure its Owner can add boxes (i.e. gadgets) without need to specify explicit security settings.

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25875 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25874 20353a03-c40f-0410-a6d1-a30d3c3de9de

When creating the asynchronous call URL make sure to specify type of arguments so later Zope publisher can cast them accordingly.

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25871 20353a03-c40f-0410-a6d1-a30d3c3de9de

Even though we detect a Redirect code not always we can rely that server will send a correct location header. 
Be more robust and add a basic check. 


git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25868 20353a03-c40f-0410-a6d1-a30d3c3de9de

 - do not allow to proceed with restoration if cutting is requested and index file exists, as bug in ZODB will prevent cutting at given transaction id


git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25867 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25866 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25863 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25862 20353a03-c40f-0410-a6d1-a30d3c3de9de

- do not fail in case of problems with getting explanation value, treat it that there is no explanation's activity

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25861 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25858 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25857 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25856 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25855 20353a03-c40f-0410-a6d1-a30d3c3de9de

workflow history. Also don't do this while business template installation,
because manage_afterClone is called, and the user may have a __cp cookie.


git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25854 20353a03-c40f-0410-a6d1-a30d3c3de9de

right search buttonas its height was equal to page height thus overlapping all
elements
(ivan)


git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25853 20353a03-c40f-0410-a6d1-a30d3c3de9de

(tatuya)


git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25852 20353a03-c40f-0410-a6d1-a30d3c3de9de

* Append translated messages.



git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25850 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25849 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25843 20353a03-c40f-0410-a6d1-a30d3c3de9de

=========================

  * Allowed the abbr, acronym, var, dfn, samp, address, bdo, thead, tfoot,
    col, and colgroup tags by default, since they are harmless, valid XHTML
    and shouldn't be filtered. Fixes:
    http://dev.plone.org/plone/ticket/6712 and
    http://dev.plone.org/plone/ticket/7251
    [limi] (backport from 1.5.5-final)

  * Add another XSS fix from for handling extraneous brackets.
  [dunny] (backport from 1.5.3-final)

  * Add XSS fixes from Anton Stonor to safe_html transform.
  [alecm, stonor] (backport from 1.5.3-final)

  * casting to int is evil without previous check of the type. so we assume as
    in CMFPlone just zero for non-int-castable values.
    [jensens] (backport from 1.5.0-a1)

  * the values in the safe_html valid tag dictionary can become strings when
    modifying them via the ZMI. Explicitly convert them to integers before
    testing their value.
    [wichert] (backport from 1.5.0-a1)


git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25842 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25841 20353a03-c40f-0410-a6d1-a30d3c3de9de

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25840 20353a03-c40f-0410-a6d1-a30d3c3de9de