changeset 603:fa6bb1f3c86c

security: bbb_access_data.snippet requires now logged in users for bbb parser
author Reimar Bauer <rb.proj AT googlemail DOT com>
date Thu, 14 Jun 2012 13:47:12 +0200
parents ba791ad6c846
children cee4ce4ee07b
files data/plugin/security/bbb_access_data.snippet
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/data/plugin/security/bbb_access_data.snippet	Thu Jun 14 13:33:59 2012 +0200
+++ b/data/plugin/security/bbb_access_data.snippet	Thu Jun 14 13:47:12 2012 +0200
@@ -21,7 +21,7 @@
         page = Page(request, page_name)
         format = page.pi['format']
         if format == "bbb_create":
-            if request.action == u"show" or request.user.may.write(page_name):
+            if request.user.valid and request.action == u"show" or request.user.may.write(page_name):
                 return True
             return False
         return Permissions.__getattr__(self, 'read')(page_name)