[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

SF.net SVN: ledger-smb:[4470] branches/1.3



Revision: 4470
          http://ledger-smb.svn.sourceforge.net/ledger-smb/?rev=4470&view=rev
Author:   einhverfr
Date:     2012-03-15 09:33:18 +0000 (Thu, 15 Mar 2012)
Log Message:
-----------
Correcting missing menu acls due to security tightening

Modified Paths:
--------------
    branches/1.3/Changelog
    branches/1.3/sql/modules/Roles.sql

Modified: branches/1.3/Changelog
===================================================================
--- branches/1.3/Changelog	2012-03-15 09:23:51 UTC (rev 4469)
+++ branches/1.3/Changelog	2012-03-15 09:33:18 UTC (rev 4470)
@@ -8,6 +8,7 @@
 * Corrected editing pos_invoice.txt whitelisting in front-end (Chris T)
 * Corrected erroneous directory transversal denial (Chris T, bug 3504924)
 * Added recon data to Norwegian chart of accounts (h/t H. Sorli) (Chris T)
+* Fixed some menu items disappearing after upgrade (Chris T, bug 3504934)
 
 Andres B is Andres Basile
 

Modified: branches/1.3/sql/modules/Roles.sql
===================================================================
--- branches/1.3/sql/modules/Roles.sql	2012-03-15 09:23:51 UTC (rev 4469)
+++ branches/1.3/sql/modules/Roles.sql	2012-03-15 09:33:18 UTC (rev 4470)
@@ -167,7 +167,10 @@
 INSERT INTO menu_acl (node_id, acl_type, role_name) 
 values (48, 'allow', 'lsmb_<?lsmb dbname ?>__employees_manage');
 
+INSERT INTO menu_acl (node_id, acl_type, role_name) 
+values (49, 'allow', 'lsmb_<?lsmb dbname ?>__employees_manage');
 
+
 CREATE ROLE "lsmb_<?lsmb dbname ?>__contact_edit"
 WITH INHERIT NOLOGIN
 IN ROLE "lsmb_<?lsmb dbname ?>__contact_read";
@@ -222,6 +225,10 @@
  WHERE node_id in (206, 210) 
        AND role_name = 'lsmb_<?lsmb dbname ?>__contact_create';
 
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (206, 'allow', 'lsmb_<?lsmb dbname ?>__contact_create'),
+       (210, 'allow', 'lsmb_<?lsmb dbname ?>__contact_create');
+
 -- AR
 CREATE ROLE "lsmb_<?lsmb dbname ?>__ar_transaction_create"
 WITH INHERIT NOLOGIN

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.