[Archetypes-devel] permission for ATReferenceBrowserWidget.referencebrowser_popup.pt?

[Raphael Ritz <r.ritz@xxxxxxxxxxxxxxxxxxxxx>]

Hi,

when allowing 'browse' in the ATReferenceBrowserWidget the
popup (referencebrowser_popup.pt) requires the current user
to have the 'List folder contents' permission on the start-up
directory because it calls 'listFolderContents' to compile
the listing.

Usually only Manager and Owner are granted this right which
highly limits the widget's usefulness for regular members
since browsing to content residing in folders they don't
own becomes impossible.

One can easily change this by calling 'folderlistingFolderContents'
from the pop-up template instead which normal members are
allowed to call but before putting this on the tracker
(which one by the way?) and changing it in the code I would
like to ask whether this was a conscious decision to call
'listFolderContents' given the implications sketched above?

Raphael



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Archetypes-devel mailing list
Archetypes-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/archetypes-devel