Commit d4c709cd authored by Romain Courteaud's avatar Romain Courteaud

Remove Manager proxy role from Base_createCloneDocument in order to prevent information leak.

Some improvements may be required on this script, as Unauthorized error may happen if one subobject is not traversable by the user.

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@19837 20353a03-c40f-0410-a6d1-a30d3c3de9de
parent 704a49fe
...@@ -132,9 +132,7 @@ return new_object.Base_redirect(form_id, \n ...@@ -132,9 +132,7 @@ return new_object.Base_redirect(form_id, \n
<item> <item>
<key> <string>_proxy_roles</string> </key> <key> <string>_proxy_roles</string> </key>
<value> <value>
<tuple> <tuple/>
<string>Manager</string>
</tuple>
</value> </value>
</item> </item>
<item> <item>
......
501 502
\ No newline at end of file \ No newline at end of file
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment