From 668359ac2979fcc54082176a859be851d7b0a244 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Aur=C3=A9lien=20Calonne?= <aurel@nexedi.com> Date: Tue, 5 Dec 2006 10:37:13 +0000 Subject: [PATCH] fix security for counter workflow git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@11607 20353a03-c40f-0410-a6d1-a30d3c3de9de --- .../portal_workflow/counter_workflow.xml | 2 +- .../portal_workflow/counter_workflow/states/closed.xml | 9 +++++++++ .../counter_workflow/states/closing.xml | 9 +++++++++ .../portal_workflow/counter_workflow/states/open.xml | 10 ++++++++++ .../portal_workflow/counter_workflow/states/paused.xml | 9 +++++++++ 5 files changed, 38 insertions(+), 1 deletion(-) diff --git a/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow.xml b/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow.xml index a30fb11fcd..e60ea82f8b 100644 --- a/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow.xml +++ b/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow.xml @@ -48,9 +48,9 @@ <key> <string>permissions</string> </key> <value> <tuple> - <string>AccessContentsInformation</string> <string>Modify portal content</string> <string>View</string> + <string>Access contents information</string> </tuple> </value> </item> diff --git a/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/closed.xml b/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/closed.xml index 6683dc8c68..a04584adb0 100644 --- a/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/closed.xml +++ b/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/closed.xml @@ -64,6 +64,15 @@ <key> <string>_container</string> </key> <value> <dictionary> + <item> + <key> <string>Access contents information</string> </key> + <value> + <tuple> + <string>Assignor</string> + <string>Manager</string> + </tuple> + </value> + </item> <item> <key> <string>AccessContentsInformation</string> </key> <value> diff --git a/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/closing.xml b/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/closing.xml index 995079adb3..317166e98d 100644 --- a/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/closing.xml +++ b/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/closing.xml @@ -64,6 +64,15 @@ <key> <string>_container</string> </key> <value> <dictionary> + <item> + <key> <string>Access contents information</string> </key> + <value> + <tuple> + <string>Assignor</string> + <string>Manager</string> + </tuple> + </value> + </item> <item> <key> <string>AccessContentsInformation</string> </key> <value> diff --git a/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/open.xml b/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/open.xml index f49b5a1934..565e70b830 100644 --- a/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/open.xml +++ b/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/open.xml @@ -66,6 +66,16 @@ <key> <string>_container</string> </key> <value> <dictionary> + <item> + <key> <string>Access contents information</string> </key> + <value> + <tuple> + <string>Assignee</string> + <string>Assignor</string> + <string>Manager</string> + </tuple> + </value> + </item> <item> <key> <string>AccessContentsInformation</string> </key> <value> diff --git a/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/paused.xml b/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/paused.xml index c3a0b781c3..354a3d07ed 100644 --- a/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/paused.xml +++ b/bt5/erp5_banking_core/WorkflowTemplateItem/portal_workflow/counter_workflow/states/paused.xml @@ -64,6 +64,15 @@ <key> <string>_container</string> </key> <value> <dictionary> + <item> + <key> <string>Access contents information</string> </key> + <value> + <tuple> + <string>Assignor</string> + <string>Manager</string> + </tuple> + </value> + </item> <item> <key> <string>AccessContentsInformation</string> </key> <value> -- 2.30.9