# HG changeset patch # User Sverre Rabbelier # Date 1235234459 0 # Node ID b356b2d7653cbff98e0d551d9cf29d65e5860fa5 # Parent e9a2b1e87b1afb3fec0d39bd6294107cd119d7bd Fix access bug in organization Patch by: Sverre Rabbelier diff -r e9a2b1e87b1a -r b356b2d7653c app/soc/views/models/organization.py --- a/app/soc/views/models/organization.py Sat Feb 21 16:40:22 2009 +0000 +++ b/app/soc/views/models/organization.py Sat Feb 21 16:40:59 2009 +0000 @@ -55,21 +55,23 @@ original_params: a dict with params for this View """ + all = "%(scope_path)s/%(link_id)s" + rights = access.Checker(params) rights['any_access'] = ['allow'] rights['show'] = ['allow'] rights['create'] = ['checkIsDeveloper'] - rights['edit'] = [('checkHasActiveRoleForScope', - [org_admin_logic.logic, 'link_id']), + rights['edit'] = [('checkHasActiveRoleForScope', + [org_admin_logic.logic, all]), ('checkIsActive', [org_logic.logic, None])] rights['delete'] = ['checkIsDeveloper'] rights['home'] = ['allow'] rights['public_list'] = ['allow'] rights['apply_mentor'] = ['checkIsUser'] rights['list_requests'] = [('checkHasActiveRoleForScope', - [org_admin_logic.logic, 'link_id'])] + [org_admin_logic.logic, all])] rights['list_roles'] = [('checkHasActiveRoleForScope', - [org_admin_logic.logic, 'link_id'])] + [org_admin_logic.logic, all])] rights['applicant'] = [('checkIsApplicationAccepted', org_app_logic.logic)]