From b55cee3078d304eb5e6d555c46c8134c00900114 Mon Sep 17 00:00:00 2001 From: Kazuhiko Shiozaki <kazuhiko@nexedi.com> Date: Wed, 25 Nov 2015 12:58:42 +0100 Subject: [PATCH] ERP5AccessTokenExtractionPlugin: use _getOb to get the object in the module. --- product/ERP5Security/ERP5AccessTokenExtractionPlugin.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/product/ERP5Security/ERP5AccessTokenExtractionPlugin.py b/product/ERP5Security/ERP5AccessTokenExtractionPlugin.py index ec075123bf..b47d9aa5c1 100644 --- a/product/ERP5Security/ERP5AccessTokenExtractionPlugin.py +++ b/product/ERP5Security/ERP5AccessTokenExtractionPlugin.py @@ -71,7 +71,7 @@ class ERP5AccessTokenExtractionPlugin(BasePlugin): token = request.form.get("access_token", None) if token is not None: token_document = self.getPortalObject().access_token_module.\ - unrestrictedTraverse(token, None) + _getOb(token, None) #聽Access Token should be validated #聽Check restricted access of URL #聽Extract login information -- 2.30.9