From f2497f6ad36b45715742aefe55c856a8809d53cd Mon Sep 17 00:00:00 2001 From: Helmut Merz Date: Thu, 20 Oct 2011 09:42:43 +0200 Subject: [PATCH] suppress edit resource action if object may not be modified by current user --- browser/resource.py | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/browser/resource.py b/browser/resource.py index 88125da..251ca49 100644 --- a/browser/resource.py +++ b/browser/resource.py @@ -243,8 +243,10 @@ class ResourceView(BaseView): # actions def getPortletActions(self, page=None, target=None): - return actions.get('portlet', ['edit_object'], view=self, page=page, - target=target) + if canWrite(target.context, 'data'): + return actions.get('portlet', ['edit_object'], view=self, page=page, + target=target) + return [] def getObjectActions(self, page=None, target=None): acts = ['info']