ERP5Workflow: add security declarations on getTransitions

1e22fa09 · iv · 0bcbe369 · 1e22fa09
Commit 1e22fa09 authored Dec 09, 2016 by iv
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

product/ERP5Workflow/Document/State.py product/ERP5Workflow/Document/State.py +2 -0

No files found.
--- a/product/ERP5Workflow/Document/State.py
+++ b/product/ERP5Workflow/Document/State.py
@@ -128,6 +128,8 @@ class State(IdAsReferenceMixin("state_", "prefix"), XMLObject, CustomStorageMatr
    return [parent._getOb(destination_id) for destination_id in
            self.getDestinationIdList()]

+  security.declareProtected(Permissions.AccessContentsInformation,
+                            'getTransitions')
  getTransitions = getDestinationIdList

  security.declareProtected(Permissions.AccessContentsInformation,