Skip to content

Commit 01735e0

Browse files
committed
fix: issue2550962. remove assert in Role::hasPermission
issue2550962 - Check uses of assert in roundup code. An assert was used to make sure that a classname always accompoanied an itemid in hasPermission. The Security::hasPErmission has an if clause that does the same check and raises a ValueError. Remove asserts because they ae removed when running python in optimized mode.
1 parent 7be5f2d commit 01735e0

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

roundup/security.py

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -267,7 +267,9 @@ def filter_iter (self, permission, classname):
267267

268268
def hasPermission (self, db, perm, uid, classname, property, itemid, chk):
269269
# if itemid is given a classname must, too, checked in caller
270-
assert not itemid or classname
270+
if itemid and classname is None:
271+
raise ValueError('classname must accompany itemid')
272+
271273
perms = self._permissions
272274
if perm not in perms:
273275
return False

0 commit comments

Comments
 (0)