[gen] Security: added missing checks at the code level, ensuring that a user can create instances of a given class (root classes, or instances created via an initiator field); bugfixes in the test system, which works again (was broken after deplonization); [shared] XmlUnmarshaller can now be ran in 'non utf-8' mode: if enabled, any marshalled string will no be Python unicode, but simple str.
This commit is contained in:
parent
0d7afb685f
commit
f843d5b7d6
11 changed files with 167 additions and 79 deletions
|
@ -294,7 +294,8 @@ function initSlaves() {
|
|||
while (i >= 0) {
|
||||
masterName = getSlaveInfo(slaves[i], 'masterName');
|
||||
master = document.getElementById(masterName);
|
||||
updateSlaves(master, slaves[i]);
|
||||
// If master is not here, we can't hide its slaves when appropriate.
|
||||
if (master) updateSlaves(master, slaves[i]);
|
||||
i -= 1;
|
||||
}
|
||||
}
|
||||
|
|
|
@ -124,10 +124,10 @@
|
|||
objs refObjects/objects;
|
||||
totalNumber refObjects/totalNumber;
|
||||
batchSize refObjects/batchSize;
|
||||
folder python: contextObj.isPrincipiaFolderish and contextObj or contextObj.getParentNode();
|
||||
folder contextObj/getCreateFolder;
|
||||
linkedPortalType python: tool.getPortalType(appyType['klass']);
|
||||
canWrite python: not appyType['isBack'] and contextObj.allows(appyType['writePermission']);
|
||||
showPlusIcon python: contextObj.mayAddReference(fieldName, folder);
|
||||
showPlusIcon python: contextObj.mayAddReference(fieldName);
|
||||
atMostOneRef python: (appyType['multiplicity'][1] == 1) and (len(objs)<=1);
|
||||
addConfirmMsg python: appyType['addConfirm'] and _('%s_addConfirm' % appyType['labelId']) or '';
|
||||
navBaseCall python: 'askRefField(\'%s\',\'%s\',\'%s\',\'%s\',**v**)' % (ajaxHookId, contextObj.absolute_url(), fieldName, innerRef)">
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue