changeset 845:4a7de0173734

wikimacro._macro_GetVal: bug fix respect ACLs on page
author Reimar Bauer <rb.proj AT googlemail DOT com>
date Thu, 30 Aug 2007 12:43:48 +0200
parents d0152eeb4499
children e74d8f2f0d9b
files MoinMoin/wikimacro.py
diffstat 1 files changed, 2 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/MoinMoin/wikimacro.py	Tue Aug 28 14:48:30 2007 +0200
+++ b/MoinMoin/wikimacro.py	Thu Aug 30 12:43:48 2007 +0200
@@ -617,6 +617,8 @@
 
     def _macro_GetVal(self, args):
         page,key = args.split(',')
+        if not self.request.user.may.read(page):
+            return ""
         d = self.request.dicts.dict(page)
         result = d.get(key,'')
         return self.formatter.text(result)