permission for ATReferenceBrowserWidget.referencebrowser_popup.pt?
Raphael Ritz <[email protected]>
| Newsgroups | gmane.comp.web.zope.plone.archetypes.devel |
|---|---|
| Organization | Humboldt-University Berlin |
| Message-ID | <[email protected]> |
Hi, when allowing 'browse' in the ATReferenceBrowserWidget the popup (referencebrowser_popup.pt) requires the current user to have the 'List folder contents' permission on the start-up directory because it calls 'listFolderContents' to compile the listing. Usually only Manager and Owner are granted this right which highly limits the widget's usefulness for regular members since browsing to content residing in folders they don't own becomes impossible. One can easily change this by calling 'folderlistingFolderContents' from the pop-up template instead which normal members are allowed to call but before putting this on the tracker (which one by the way?) and changing it in the code I would like to ask whether this was a conscious decision to call 'listFolderContents' given the implications sketched above? Raphael ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click