Changeset 3157 for WAeUP_SRP/base

Timestamp:

13 Feb 2008, 18:26:14 (17 years ago)

Author:

joachim

Message:

allow cpsdocument_create only for section_officers

File:

• WAeUP_SRP/base/skins/cps_custom/cpsdocument_create.py (modified) (1 diff)

WAeUP_SRP/base/skins/cps_custom/cpsdocument_create.py

@@ -27 +27 @@
 ti = getToolByName(context, 'portal_types').getTypeInfo(type_name)
 
-is_valid, ds = ti.validateObject(None, layout_mode='create',
-                                 request=REQUEST, context=context,
-                                 cluster=cluster, use_session=True)
-
-if is_valid:
-    meth_id = ti.queryMethodID('create_do', 'cpsdocument_create_do')
-    ob = getattr(context, meth_id)(type_name, ds.getDataModel())
-    url = ob.absolute_url()
-    meth_id = ti.queryMethodID('created', None)
-    if meth_id is not None:
-        getattr(context, meth_id)(object=ob)
-    action = ob.getTypeInfo().immediate_view
-    psm = 'psm_content_created'
-    args = {}
-else:
-    url = context.absolute_url()
-    action = 'cpsdocument_create_form'
-    psm = 'psm_content_error'
-    args = {'type_name': type_name}
-    args.update(getFormUidUrlArg(REQUEST))
-
+while True:
+    if not context.isSectionOfficer():
+        psm = "illegal access"
+        break
+    is_valid, ds = ti.validateObject(None, layout_mode='create',
+                                    request=REQUEST, context=context,
+                                    cluster=cluster, use_session=True)
+    
+    if is_valid:
+        meth_id = ti.queryMethodID('create_do', 'cpsdocument_create_do')
+        ob = getattr(context, meth_id)(type_name, ds.getDataModel())
+        url = ob.absolute_url()
+        meth_id = ti.queryMethodID('created', None)
+        if meth_id is not None:
+            getattr(context, meth_id)(object=ob)
+        action = ob.getTypeInfo().immediate_view
+        psm = 'psm_content_created'
+        args = {}
+    else:
+        url = context.absolute_url()
+        action = 'cpsdocument_create_form'
+        psm = 'psm_content_error'
+        args = {'type_name': type_name}
+        args.update(getFormUidUrlArg(REQUEST))
+    break
+    
 args['portal_status_message'] = psm
 url = url + '/' + action + '?' + urlencode(args)