[Mpuls-commits] r5616 - base/trunk/mpulsweb/controllers

[scm-commit@wald.intevation.org]

Author: bh
Date: 2011-11-18 20:37:00 +0100 (Fri, 18 Nov 2011)
New Revision: 5616

Modified:
   base/trunk/mpulsweb/controllers/privacy.py
Log:
Do not require editability in the privacy controller where appropriate.
This change only covers places where the _loadCase method is called. In
the privacy controller, this means the action printStatement now calls
_loadCase with read_only=True.

Implements part of the access restrictions for mpuls/issue2367.


Modified: base/trunk/mpulsweb/controllers/privacy.py
===================================================================
--- base/trunk/mpulsweb/controllers/privacy.py	2011-11-18 19:26:01 UTC (rev 5615)
+++ base/trunk/mpulsweb/controllers/privacy.py	2011-11-18 19:37:00 UTC (rev 5616)
@@ -36,7 +36,7 @@
     @checkRole('cm')
     def printStatement(self, id):
         id = self._checkInt(id)
-        case = self._loadCase(id)
+        case = self._loadCase(id, read_only=True)
         statement = case.getPrivacyStatement()
         c.content = statement.fillout()
         return render('privacy/default_statement.mako')