Changing browser:view registrations to browser:page since view doesn't actually do anything with the permissions. This fixes the anyone can delete comments problem. evilbungle branch merge.
svn path=/plone.app.discussion/trunk/; revision=30665
This commit is contained in:
@@ -36,7 +36,7 @@
|
||||
/>
|
||||
|
||||
<!-- Delete comment view -->
|
||||
<browser:view
|
||||
<browser:page
|
||||
for="plone.app.discussion.interfaces.IComment"
|
||||
name="moderate-delete-comment"
|
||||
layer="..interfaces.IDiscussionLayer"
|
||||
@@ -45,7 +45,7 @@
|
||||
/>
|
||||
|
||||
<!-- Publish comment view -->
|
||||
<browser:view
|
||||
<browser:page
|
||||
for="plone.app.discussion.interfaces.IComment"
|
||||
name="moderate-publish-comment"
|
||||
layer="..interfaces.IDiscussionLayer"
|
||||
|
||||
Reference in New Issue
Block a user