Treat user with Manager role as superuser.

d6d6e8a1 · Łukasz Nowak · Cédric Le Ninivin · 9d9f70b9 · d6d6e8a1
Commit d6d6e8a1 authored Oct 10, 2012 by Łukasz Nowak Committed by Cédric Le Ninivin Jan 14, 2016
Show whitespace changes
Inline Side-by-side

Showing with 4 additions and 2 deletions

product/ERP5Catalog/CatalogTool.py product/ERP5Catalog/CatalogTool.py +4 -2

No files found.
--- a/product/ERP5Catalog/CatalogTool.py
+++ b/product/ERP5Catalog/CatalogTool.py
@@ -456,7 +456,8 @@ class CatalogTool (UniqueObject, ZCatalog, CMFCoreCatalogTool, ActiveObject):
      """
      user = _getAuthenticatedUser(self)
      user_str = str(user)
-      user_is_superuser = (user == system_user) or (user_str == SUPER_USER)
+      user_is_superuser = (user == system_user) or (user_str == SUPER_USER) or \
+          ('Manager' in user.getRoles())
      allowedRolesAndUsers = self._listAllowedRolesAndUsers(user)
      role_column_dict = {}
      local_role_column_dict = {}
@@ -582,7 +583,8 @@ class CatalogTool (UniqueObject, ZCatalog, CMFCoreCatalogTool, ActiveObject):
      """
      user = _getAuthenticatedUser(self)
      user_str = str(user)
-      user_is_superuser = (user == system_user) or (user_str == SUPER_USER)
+      user_is_superuser = (user == system_user) or (user_str == SUPER_USER) or \
+          ('Manager' in user.getRoles())
      if user_is_superuser:
        # We need no security check for super user.
        return query