check for permissions when listing parent folders (#4509)

This commit is contained in:
Frédéric Péters 2014-03-21 13:05:27 +01:00
parent a8638bbd8c
commit f102a57ddc
1 changed files with 3 additions and 0 deletions

View File

@ -96,10 +96,13 @@ class Folder(Container):
def parent_folders(self):
parents = []
sm = getSecurityManager()
for id, item in self.contentItems():
if not ILink.providedBy(item):
continue
if item.folder.to_object:
if not sm.checkPermission('View', item.folder.to_object):
continue
parents.append(item.folder.to_object)
return parents