src/cm/security.py
Thu, 03 Oct 2013 10:19:03 +0200 gibus Allow text manager to add users on this text with no global role.
Mon, 15 Jul 2013 09:13:19 +0200 gibus Fixes AttributeError: 'FakeRequest' object has no attribute 'GET'
Thu, 11 Jul 2013 14:44:02 +0200 gibus improves performence of text_view_comments by memoizing permission computations.
Fri, 05 Oct 2012 10:21:07 +0200 gibus Fix filtering of teachers' comments for individual students in role_teacher role model when using DECORATED_CREATORS.
Tue, 12 Jun 2012 14:00:32 +0200 gibus In role_teacher model, individual students can see their own comments but also teacher's ones, whereas individual students' comments cannot be seen by students.
Mon, 06 Jun 2011 10:08:10 +0200 gibus if DECORATED_CREATORS take into account the "fake" username if has_own_perm()
Thu, 15 Jul 2010 17:07:15 +0200 raph Merge with b8672f57ba3cd4e876277a13c69621446b940052
Fri, 09 Jul 2010 10:05:29 +0200 raph add api: basic auth / unit tests / online doc (based on django-piston)
Thu, 15 Jul 2010 16:54:29 +0200 raph simplification of security check: all unauthorized exceptions are dealt with by context processors
Thu, 11 Mar 2010 15:37:38 +0100 raph fix security pb (too restrictive): logged users should inherit anon roles (if no text role is defined)
Wed, 20 Jan 2010 14:43:18 +0100 raph fix permissions in get_text_with_perms
Thu, 14 Jan 2010 11:08:28 +0100 raph all logged-in users also have anon users roles (fixes #16)
Thu, 03 Dec 2009 11:55:50 +0100 raph FIX: comment visibility takes ownership into account
Mon, 23 Nov 2009 15:14:29 +0100 raph import from internal svn r 4007
less more (0) tip