Generate allowRoleAndUsers with Role only if View permission. This patch...

Generate allowRoleAndUsers with Role only if View permission. This patch should reduce entries in roles_and_users table.

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@19108 20353a03-c40f-0410-a6d1-a30d3c3de9de

product/ERP5Catalog/CatalogTool.py

@@ -150,19 +150,19 @@ class IndexableObjectWrapper(CMFCoreIndexableObjectWrapper):
                 allowed[user] = 1
               else:
                 allowed['user:' + user] = 1
-            # Added for ERP5 project by JP Smets
-            # The reason why we do not want to keep Owner is because we are
-            # trying to reduce the number of security definitions
-            # However, this is a bad idea if we start to use Owner role
-            # as a kind of bamed Assignee and if we need it for worklists. Therefore
-            # we may sometimes catalog the owner user ID whenever the Owner
-            # has view permission (see getAllowedRolesAndUsers bellow
-            # as well as getViewPermissionOwner method in Base)
-            if role != 'Owner':
-              if withnuxgroups:
-                allowed[user + ':' + role] = 1
-              else:
-                allowed['user:' + user + ':' + role] = 1
+              # Added for ERP5 project by JP Smets
+              # The reason why we do not want to keep Owner is because we are
+              # trying to reduce the number of security definitions
+              # However, this is a bad idea if we start to use Owner role
+              # as a kind of bamed Assignee and if we need it for worklists. Therefore
+              # we may sometimes catalog the owner user ID whenever the Owner
+              # has view permission (see getAllowedRolesAndUsers bellow
+              # as well as getViewPermissionOwner method in Base)
+              if role != 'Owner':
+                if withnuxgroups:
+                  allowed[user + ':' + role] = 1
+                else:
+                  allowed['user:' + user + ':' + role] = 1
         if allowed.has_key('Owner'):
           del allowed['Owner']
         return list(allowed.keys())