permission for ATReferenceBrowserWidget.referencebrowser_popup.pt?

Raphael Ritz <[email protected]>
Newsgroups gmane.comp.web.zope.plone.archetypes.devel
Organization Humboldt-University Berlin
Message-ID <[email protected]>
Hi,

when allowing 'browse' in the ATReferenceBrowserWidget the
popup (referencebrowser_popup.pt) requires the current user
to have the 'List folder contents' permission on the start-up
directory because it calls 'listFolderContents' to compile
the listing.

Usually only Manager and Owner are granted this right which
highly limits the widget's usefulness for regular members
since browsing to content residing in folders they don't
own becomes impossible.

One can easily change this by calling 'folderlistingFolderContents'
from the pop-up template instead which normal members are
allowed to call but before putting this on the tracker
(which one by the way?) and changing it in the code I would
like to ask whether this was a conscious decision to call
'listFolderContents' given the implications sketched above?

Raphael



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.