fix bug in menu() permission filter [SF#1444440]

Author: Alexander Smishlajev

CHANGES.txt

@@ -4,6 +4,7 @@ are given with the most recent entry first.
 2006-??-?? 1.1.2
 Fixed:
 - progress display in roundup-admin reindex
+- bug in menu() permission filter (sf bug 1444440)
 
 
 2006-03-03 1.1.1

roundup/cgi/templating.py

@@ -1762,7 +1762,7 @@ def menu(self, size=None, height=None, showid=0, additional=[], value=None,
         options = [opt
             for opt in linkcl.filter(None, conditions, sort_on, (None, None))
             if self._db.security.hasPermission("View", self._client.userid,
-                linkcl.classname, itemid=id)]
+                linkcl.classname, itemid=opt)]
 
         # make sure we list the current value if it's retired
         if value and value not in options:
@@ -1948,7 +1948,7 @@ def menu(self, size=None, height=None, showid=0, additional=[],
         options = [opt
             for opt in linkcl.filter(None, conditions, sort_on)
             if self._db.security.hasPermission("View", self._client.userid,
-                linkcl.classname, itemid=id)]
+                linkcl.classname, itemid=opt)]
         height = height or min(len(options), 7)
         l = ['<select multiple name="%s" size="%s">'%(self._formname, height)]
         k = linkcl.labelprop(1)