diff --git a/browser/compound/view_macros.pt b/browser/compound/view_macros.pt index eac9cc3..c854558 100644 --- a/browser/compound/view_macros.pt +++ b/browser/compound/view_macros.pt @@ -3,7 +3,9 @@ - + + + diff --git a/organize/work/browser.py b/organize/work/browser.py index 4b002eb..3a78a10 100644 --- a/organize/work/browser.py +++ b/organize/work/browser.py @@ -50,7 +50,7 @@ from loops.organize.tracking.browser import BaseTrackView from loops.organize.tracking.report import TrackDetails from loops.organize.work.base import WorkItem from loops.security.common import canAccessObject, canListObject, canWriteObject -from loops.security.common import checkPermission +from loops.security.common import canAccessRestricted, checkPermission from loops import util from loops.util import _ @@ -322,6 +322,9 @@ class PersonWorkItems(BaseWorkItemsView, ConceptView): columns = set(['Task', 'Title', 'Day', 'Start', 'End', 'Duration', 'Info']) + def checkPermissions(self): + return canAccessRestricted(self.context) + def getCriteria(self): return self.baseCriteria diff --git a/security/common.py b/security/common.py index 30c1c3c..f1904ec 100644 --- a/security/common.py +++ b/security/common.py @@ -74,6 +74,9 @@ def canListObject(obj, noCheck=False): return True return canAccess(obj, 'title') +def canAccessRestricted(obj): + return checkPermission('loops.ViewRestricted', obj) + def canWriteObject(obj): return canWrite(obj, 'title') or canAssignAsParent(obj)