Changeset 2431 for WAeUP_SRP/base/skins/waeup_student

Timestamp:

25 Oct 2007, 13:17:45 (17 years ago)

Author:

Henrik Bettermann

Message:

close security holes

File:

• WAeUP_SRP/base/skins/waeup_student/search_students.py (modified) (1 diff)

WAeUP_SRP/base/skins/waeup_student/search_students.py

@@ -29 +29 @@
 
 allowed = True
-if is_anon:
+if is_anon or context.isStudent():
     allowed = False
 from Products.AdvancedQuery import Eq, Between, Le,In