From 2e76910134c60d876631966946e43459fe47f52b Mon Sep 17 00:00:00 2001
From: Helmut Merz <helmutm@cy55.de>
Date: Mon, 1 Jun 2015 08:39:46 +0200
Subject: [PATCH] make sure management views of records/tracks can only
 accessed by managers

---
 organize/tracking/configure.zcml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/organize/tracking/configure.zcml b/organize/tracking/configure.zcml
index 016ddf5..b1b0867 100644
--- a/organize/tracking/configure.zcml
+++ b/organize/tracking/configure.zcml
@@ -61,7 +61,7 @@
       for="cybertools.tracking.interfaces.ITrackingStorage"
       name="index.html"
       class="cybertools.tracking.browser.TrackingStorageView"
-      permission="zope.View" />
+      permission="loops.ManageSite" />
 
   <browser:menuItem
       menu="zmi_views"
@@ -74,13 +74,13 @@
       for="cybertools.tracking.interfaces.ITrack"
       name="index.html"
       class="loops.organize.tracking.browser.BaseTrackView"
-      permission="zope.View" />
+      permission="loops.ManageSite" />
 
   <browser:page
       for="loops.organize.tracking.change.IChangeRecord"
       name="index.html"
       class="loops.organize.tracking.browser.ChangeView"
-      permission="zope.View" />
+      permission="loops.ManageSite" />
 
   <browser:page
       name="edit.html"
@@ -93,7 +93,7 @@
       for="loops.organize.tracking.access.IAccessRecord"
       name="index.html"
       class="loops.organize.tracking.browser.AccessView"
-      permission="zope.View" />
+      permission="loops.ManageSite" />
 
   <browser:menuItem
       menu="zmi_views"