Changeset 3858 for WAeUP_SRP/trunk/WAeUPTool.py

Timestamp:

17 Jan 2009, 07:29:24 (16 years ago)

Author:

Henrik Bettermann

Message:

implement password notification module (send mail not yet tested)

File:

• WAeUP_SRP/trunk/WAeUPTool.py (modified) (2 diffs)

WAeUP_SRP/trunk/WAeUPTool.py

@@ -182 +182 @@
                                                         "Manager" in roles)
         info['is_clearanceofficer'] = not is_student and ("ClearanceOfficer" in roles)
-        is_allowed = info['is_allowed'] = not is_anonymous
+        #is_allowed = info['is_allowed'] = not is_anonymous
         requested_id = context.getStudentId()
         student_id  = None
-        if is_allowed:
-            if not is_student and requested_id:
-                student_id  = requested_id
-            elif not is_allowed and (not is_staff or  member_id != requested_id):
+        if not is_anonymous and requested_id:
+            if (is_student and member_id == requested_id) or is_staff:
+                student_id = requested_id
+            else:    
                 logger.info('%s tried to access %s of %s' % (member_id,context.portal_type,requested_id))
-            else:
-                student_id = member_id
         info['student_id'] = student_id
         return info
@@ -570 +568 @@
     ###)
 
-    security.declareProtected(View,'getCredential') ###(
+    security.declarePublic('getCredential') ###(
     def getCredential(self,student_id):
         student_entry = getattr(self.portal_directories.students,student_id,None)
-        if not self.isStaff():
-            mtool = self.portal_membership
-            member = mtool.getAuthenticatedMember()
-            logger = logging.getLogger('WAeUPTool.getCredential')
-            logger.info('%s tried to access password of %s' % (member,student_id))
-            return None
+        #import pdb;pdb.set_trace()
+        #if not self.isStaff():
+        #    mtool = self.portal_membership
+        #    member = mtool.getAuthenticatedMember()
+        #    logger = logging.getLogger('WAeUPTool.getCredential')
+        #    logger.info('%s tried to access password of %s' % (member,student_id))
+        #    return None
         if student_entry is None:
             return None