forms: fix receiver access to form submission (#7329)

This commit is contained in:
Frédéric Péters 2015-05-21 16:15:14 +02:00
parent f4f804f13d
commit 3baccb0b5d
1 changed files with 1 additions and 1 deletions

View File

@ -251,7 +251,7 @@ class FormPage(Directory):
user_roles = set([])
other_roles = (self.formdef.roles or [])
if self.formdef.workflow_roles:
other_roles.extend(self.formdef.workflow_roles.keys())
other_roles.extend(self.formdef.workflow_roles.values())
if not user_roles.intersection(other_roles):
raise errors.AccessForbiddenError()