Changeset 4032 for WAeUP_SRP/trunk

Timestamp:

27 Mar 2009, 07:05:02 (16 years ago)

Author:

Henrik Bettermann

Message:

enhance security

Location:

WAeUP_SRP/trunk/skins

Files:

• waeup_futminna/id_card_demo.pt (modified) (3 diffs)
• waeup_utilities/viewimage.py (modified) (1 diff)

WAeUP_SRP/trunk/skins/waeup_futminna/id_card_demo.pt

@@ -2 +2 @@
   <metal:main fill-slot="main"
               tal:define="global info context/getIdCardInfo;
-                          passport_url info/passport_url;
                           ">
 
@@ -8 +7 @@
       <span tal:content="here/illegal_view" />
     </span>
-    <span tal:condition="info"
-          tal:define="pd python: info['personal']">
-
-    
+    <span tal:condition="info">
+    <span tal:define="pd python: info['personal'];
+                      passport_url info/passport_url|nothing;">
     <table border=0 style="border-style:solid; border-width:1px; border-color:black" cellpadding="0px" cellspacing="10px" width="450px" height="300px">
     <tr>
@@ -148 +146 @@
       </tr>
       </table>     
-
+  </span>
   </span>
   </metal:main>

WAeUP_SRP/trunk/skins/waeup_utilities/viewimage.py

@@ -16 +16 @@
     def set_trace():
         pass
+        
+mtool = context.portal_membership
+
+if mtool.isAnonymousUser():
+    return None        
+        
 if path is None and traverse_subpath:
     traverse_subpath.insert(0,traverse_subpath[0][0])