Skip to content

Commit bd04f53

Browse files
committed
Update to current classic config. Fixes issue with users being able to
see all queries even ones that they do not own and are not public.
1 parent 8ecd48c commit bd04f53

File tree

1 file changed

+14
-2
lines changed

1 file changed

+14
-2
lines changed
Lines changed: 14 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,15 @@
11
<!-- query.item -->
2-
<span tal:replace="structure context/renderQueryForm" />
3-
2+
<span tal:condition="context/is_view_ok" tal:replace="structure
3+
context/renderQueryForm" />
4+
<tal:block tal:condition="not:context/is_view_ok">
5+
<tal:block metal:use-macro="templates/page/macros/icing">
6+
<title metal:fill-slot="head_title">You can not view query</title>
7+
<tal:block metal:fill-slot="body_title">
8+
You can not view query.
9+
</tal:block>
10+
<td class="content" metal:fill-slot="content">
11+
You are not allowed to view <span tal:content="context/_classname"/>
12+
with id <span tal:content="context/id"/>
13+
</td>
14+
</tal:block>
15+
</tal:block>

0 commit comments

Comments
 (0)