[Zope-CMF] Re: Zope-CMF digest, Vol 1 #961 - 11 msgs

[Lynn Walton]

>
> > Ah, I remember this bug;  the "Classic" type of DCWorkflow
> > mistakenly grants 'View' when in 'private' state.
>
> Actually I can't see it in the code for any workflow. Isn't this rather
> a manifestation of http://www.zope.org/Products/PTK/Tracker/410 ?
>

I reported it to the list on 1/7 as a bug in DCWorkflow that was still present in cvs ver
0.4.2.
It's around line 301 of in     def setupDefaultWorkflowClassic(wf):  of Default.py in
DCWorkflow ...

after:
    sdef = wf.states['pending']
    sdef.setProperties(
    title='Waiting for reviewer',
    transitions=('publish', 'reject', 'retract',))

SHOULD BE:
     sdef.setPermission(p_access, 0, ( r_owner, r_manager, r_reviewer))
     sdef.setPermission(p_view, 0, ( r_owner, r_manager, r_reviewer))

WAS:
    sdef.setPermission(p_access, 1, (r_anon,r_manager,r_reviewer))
    sdef.setPermission(p_view, 1, ( r_anon, r_manager, r_reviewer))

I don't know if it ever made the tracker. I asked if I should put it in ... but didn't
get any answer. And I'm not confident enough of my Zope Zen to "assume" it's a bug
without a little confirmation.

Lynn