[Zope-Checkins] SVN: Zope/branches/2.12/ - LP #143722: Added missing permission to ObjectManager.manage_hasId,

[Jens Vagelpohl]

Log message for revision 114738:
  - LP #143722: Added missing permission to ObjectManager.manage_hasId,
    which prevented renaming files and folders via FTP.
  

Changed:
  U   Zope/branches/2.12/doc/CHANGES.rst
  U   Zope/branches/2.12/src/OFS/ObjectManager.py

-=-
Modified: Zope/branches/2.12/doc/CHANGES.rst
===================================================================
--- Zope/branches/2.12/doc/CHANGES.rst	2010-07-14 11:40:36 UTC (rev 114737)
+++ Zope/branches/2.12/doc/CHANGES.rst	2010-07-14 12:08:07 UTC (rev 114738)
@@ -11,6 +11,9 @@
 Bugs Fixed
 ++++++++++
 
+- LP #143722: Added missing permission to ObjectManager.manage_hasId,
+  which prevented renaming files and folders via FTP.
+
 - LP #143564: Request.resolve_url did not correctly re-raise 
   exceptions encountered during path traversal.
 

Modified: Zope/branches/2.12/src/OFS/ObjectManager.py
===================================================================
--- Zope/branches/2.12/src/OFS/ObjectManager.py	2010-07-14 11:40:36 UTC (rev 114737)
+++ Zope/branches/2.12/src/OFS/ObjectManager.py	2010-07-14 12:08:07 UTC (rev 114738)
@@ -733,6 +733,7 @@
                 out=out+((k,stat),)
         return marshal.dumps(out)
 
+    security.declareProtected(ftp_access, 'manage_hasId')
     def manage_hasId(self, REQUEST):
         """ check if the folder has an object with REQUEST['id'] """