[Zope-Checkins] SVN: Zope/trunk/ - LP #143722: Added missing permission to ObjectManager.manage_hasId,

Jens Vagelpohl jens at dataflake.org
Wed Jul 14 08:11:11 EDT 2010


Log message for revision 114739:
  - LP #143722: Added missing permission to ObjectManager.manage_hasId,
    which prevented renaming files and folders via FTP.
  

Changed:
  U   Zope/trunk/doc/CHANGES.rst
  U   Zope/trunk/src/OFS/ObjectManager.py

-=-
Modified: Zope/trunk/doc/CHANGES.rst
===================================================================
--- Zope/trunk/doc/CHANGES.rst	2010-07-14 12:08:07 UTC (rev 114738)
+++ Zope/trunk/doc/CHANGES.rst	2010-07-14 12:11:11 UTC (rev 114739)
@@ -11,6 +11,9 @@
 Bugs Fixed
 ++++++++++
 
+- LP #143722: Added missing permission to ObjectManager.manage_hasId,
+  which prevented renaming files and folders via FTP.
+
 - LP #143564: Request.resolve_url did not correctly re-raise
   exceptions encountered during path traversal.
 

Modified: Zope/trunk/src/OFS/ObjectManager.py
===================================================================
--- Zope/trunk/src/OFS/ObjectManager.py	2010-07-14 12:08:07 UTC (rev 114738)
+++ Zope/trunk/src/OFS/ObjectManager.py	2010-07-14 12:11:11 UTC (rev 114739)
@@ -726,6 +726,7 @@
                 out=out+((k,stat),)
         return marshal.dumps(out)
 
+    security.declareProtected(ftp_access, 'manage_hasId')
     def manage_hasId(self, REQUEST):
         """ check if the folder has an object with REQUEST['id'] """
 



More information about the Zope-Checkins mailing list