Changeset 62dbb6 in indico

Timestamp:

05/03/11 16:05:28 (2 years ago)

Author:

Pedro Ferreira <jose.pedro.ferreira@…>

Branches:

master, burotel, hello-world-walkthrough, ipv6, v0.98-series, v0.98.2, v0.98.3, v0.98b1, v0.98b2, v0.99, 051b2622c51afb171a1dedb46a0df4fbb0cbd02e, d9941f8582b36b24821a11ea5ba16fda6a457fb1

Children:

f71e66

Parents:

07fcf9

git-author:

Alberto Resco Perez <alberto.resco.perez@…> (04/26/11 17:01:34)

git-committer:

Pedro Ferreira <jose.pedro.ferreira@…> (05/03/11 16:05:28)

Message:

[FIX] Calendar security added

• The protected categories can not be shown unless the user has access.
• Closes #738.

File:

• indico/MaKaC/webinterface/rh/calendar.py (modified) (1 diff)

indico/MaKaC/webinterface/rh/calendar.py

@@ -29 +29 @@
 from datetime import datetime
 from pytz import timezone
+from MaKaC.errors import AccessError
 
 
-class RHCalendar( base.RH ):
+class RHCalendar(base.RHProtected):
     _uh = urlHandlers.UHCalendar
+
+    def _checkProtection(self):
+        if self._getUser() == None:
+            self._checkSessionUser()
+
+        for item in self._categList:
+            if not item.canAccess(self.getAW()):
+                self._categList.remove(item)
+        self._target = self._categList
+        if len(self._categList) > 0:
+            self._categ = self._categList[0]
+        else:
+            raise AccessError()
 
     def _checkParams( self, params ):