cco/loops
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

make sure management views of records/tracks can only accessed by managers

Browse source
This commit is contained in:
Helmut Merz 2015-06-01 08:39:46 +02:00
parent a97ea1b5d1
commit 2e76910134
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
organize/tracking/configure.zcml
View file

@ -61,7 +61,7 @@
for="cybertools.tracking.interfaces.ITrackingStorage" for="cybertools.tracking.interfaces.ITrackingStorage"
name="index.html" name="index.html"
class="cybertools.tracking.browser.TrackingStorageView" class="cybertools.tracking.browser.TrackingStorageView"
permission="zope.View" /> permission="loops.ManageSite" />
<browser:menuItem <browser:menuItem
menu="zmi_views" menu="zmi_views"
@ -74,13 +74,13 @@
for="cybertools.tracking.interfaces.ITrack" for="cybertools.tracking.interfaces.ITrack"
name="index.html" name="index.html"
class="loops.organize.tracking.browser.BaseTrackView" class="loops.organize.tracking.browser.BaseTrackView"
permission="zope.View" /> permission="loops.ManageSite" />
<browser:page <browser:page
for="loops.organize.tracking.change.IChangeRecord" for="loops.organize.tracking.change.IChangeRecord"
name="index.html" name="index.html"
class="loops.organize.tracking.browser.ChangeView" class="loops.organize.tracking.browser.ChangeView"
permission="zope.View" /> permission="loops.ManageSite" />
<browser:page <browser:page
name="edit.html" name="edit.html"
@ -93,7 +93,7 @@
for="loops.organize.tracking.access.IAccessRecord" for="loops.organize.tracking.access.IAccessRecord"
name="index.html" name="index.html"
class="loops.organize.tracking.browser.AccessView" class="loops.organize.tracking.browser.AccessView"
permission="zope.View" /> permission="loops.ManageSite" />
<browser:menuItem <browser:menuItem
menu="zmi_views" menu="zmi_views"