From 668359ac2979fcc54082176a859be851d7b0a244 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Aur=C3=A9lien=20Calonne?= <aurel@nexedi.com>
Date: Tue, 5 Dec 2006 10:37:13 +0000
Subject: [PATCH] fix security for counter workflow

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@11607 20353a03-c40f-0410-a6d1-a30d3c3de9de
---
 .../portal_workflow/counter_workflow.xml               |  2 +-
 .../portal_workflow/counter_workflow/states/closed.xml |  9 +++++++++
 .../counter_workflow/states/closing.xml                |  9 +++++++++
 .../portal_workflow/counter_workflow/states/open.xml   | 10 ++++++++++
 .../portal_workflow/counter_workflow/states/paused.xml |  9 +++++++++
 5 files changed, 38 insertions(+), 1 deletion(-)

diff --git a/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow.xml b/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow.xml
index a30fb11fcd..e60ea82f8b 100644
--- a/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow.xml
+++ b/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow.xml
@@ -48,9 +48,9 @@
             <key> <string>permissions</string> </key>
             <value>
               <tuple>
-                <string>AccessContentsInformation</string>
                 <string>Modify portal content</string>
                 <string>View</string>
+                <string>Access contents information</string>
               </tuple>
             </value>
         </item>
diff --git a/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/closed.xml b/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/closed.xml
index 6683dc8c68..a04584adb0 100644
--- a/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/closed.xml
+++ b/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/closed.xml
@@ -64,6 +64,15 @@
             <key> <string>_container</string> </key>
             <value>
               <dictionary>
+                <item>
+                    <key> <string>Access contents information</string> </key>
+                    <value>
+                      <tuple>
+                        <string>Assignor</string>
+                        <string>Manager</string>
+                      </tuple>
+                    </value>
+                </item>
                 <item>
                     <key> <string>AccessContentsInformation</string> </key>
                     <value>
diff --git a/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/closing.xml b/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/closing.xml
index 995079adb3..317166e98d 100644
--- a/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/closing.xml
+++ b/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/closing.xml
@@ -64,6 +64,15 @@
             <key> <string>_container</string> </key>
             <value>
               <dictionary>
+                <item>
+                    <key> <string>Access contents information</string> </key>
+                    <value>
+                      <tuple>
+                        <string>Assignor</string>
+                        <string>Manager</string>
+                      </tuple>
+                    </value>
+                </item>
                 <item>
                     <key> <string>AccessContentsInformation</string> </key>
                     <value>
diff --git a/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/open.xml b/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/open.xml
index f49b5a1934..565e70b830 100644
--- a/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/open.xml
+++ b/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/open.xml
@@ -66,6 +66,16 @@
             <key> <string>_container</string> </key>
             <value>
               <dictionary>
+                <item>
+                    <key> <string>Access contents information</string> </key>
+                    <value>
+                      <tuple>
+                        <string>Assignee</string>
+                        <string>Assignor</string>
+                        <string>Manager</string>
+                      </tuple>
+                    </value>
+                </item>
                 <item>
                     <key> <string>AccessContentsInformation</string> </key>
                     <value>
diff --git a/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/paused.xml b/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/paused.xml
index c3a0b781c3..354a3d07ed 100644
--- a/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/paused.xml
+++ b/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/paused.xml
@@ -64,6 +64,15 @@
             <key> <string>_container</string> </key>
             <value>
               <dictionary>
+                <item>
+                    <key> <string>Access contents information</string> </key>
+                    <value>
+                      <tuple>
+                        <string>Assignor</string>
+                        <string>Manager</string>
+                      </tuple>
+                    </value>
+                </item>
                 <item>
                     <key> <string>AccessContentsInformation</string> </key>
                     <value>
-- 
2.30.9