check for permissions when listing parent folders (#4509)
This commit is contained in:
parent
a8638bbd8c
commit
f102a57ddc
|
@ -96,10 +96,13 @@ class Folder(Container):
|
|||
|
||||
def parent_folders(self):
|
||||
parents = []
|
||||
sm = getSecurityManager()
|
||||
for id, item in self.contentItems():
|
||||
if not ILink.providedBy(item):
|
||||
continue
|
||||
if item.folder.to_object:
|
||||
if not sm.checkPermission('View', item.folder.to_object):
|
||||
continue
|
||||
parents.append(item.folder.to_object)
|
||||
return parents
|
||||
|
||||
|
|
Reference in New Issue