[gen] Security: added missing checks at the code level, ensuring that a user can create instances of a given class (root classes, or instances created via an initiator field); bugfixes in the test system, which works again (was broken after deplonization); [shared] XmlUnmarshaller can now be ran in 'non utf-8' mode: if enabled, any marshalled string will no be Python unicode, but simple str.
This commit is contained in:
		
							parent
							
								
									0d7afb685f
								
							
						
					
					
						commit
						f843d5b7d6
					
				
					 11 changed files with 167 additions and 79 deletions
				
			
		|  | @ -294,7 +294,8 @@ function initSlaves() { | |||
|   while (i >= 0) { | ||||
|     masterName = getSlaveInfo(slaves[i], 'masterName'); | ||||
|     master = document.getElementById(masterName); | ||||
|     updateSlaves(master, slaves[i]); | ||||
|     // If master is not here, we can't hide its slaves when appropriate.
 | ||||
|     if (master) updateSlaves(master, slaves[i]); | ||||
|     i -= 1; | ||||
|   } | ||||
| } | ||||
|  |  | |||
|  | @ -124,10 +124,10 @@ | |||
|                  objs refObjects/objects; | ||||
|                  totalNumber refObjects/totalNumber; | ||||
|                  batchSize refObjects/batchSize; | ||||
|                  folder python: contextObj.isPrincipiaFolderish and contextObj or contextObj.getParentNode(); | ||||
|                  folder contextObj/getCreateFolder; | ||||
|                  linkedPortalType python: tool.getPortalType(appyType['klass']); | ||||
|                  canWrite python: not appyType['isBack'] and contextObj.allows(appyType['writePermission']); | ||||
|                  showPlusIcon python: contextObj.mayAddReference(fieldName, folder); | ||||
|                  showPlusIcon python: contextObj.mayAddReference(fieldName); | ||||
|                  atMostOneRef python: (appyType['multiplicity'][1] == 1) and (len(objs)<=1); | ||||
|                  addConfirmMsg python: appyType['addConfirm'] and _('%s_addConfirm' % appyType['labelId']) or ''; | ||||
|                  navBaseCall python: 'askRefField(\'%s\',\'%s\',\'%s\',\'%s\',**v**)' % (ajaxHookId, contextObj.absolute_url(), fieldName, innerRef)"> | ||||
|  |  | |||
		Loading…
	
	Add table
		Add a link
		
	
		Reference in a new issue
	
	 Gaetan Delannay
						Gaetan Delannay