changeset 1927:7803b0e56a0c

MonthCalendar: ACL security fix (ported from 1.5)
author Thomas Waldmann <tw AT waldmann-edv DOT de>
date Mon, 02 Apr 2007 23:26:42 +0200
parents 8b676947238a
children 57cbc30bfa31
files MoinMoin/macro/MonthCalendar.py
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/MoinMoin/macro/MonthCalendar.py	Mon Apr 02 22:05:25 2007 +0200
+++ b/MoinMoin/macro/MonthCalendar.py	Mon Apr 02 23:26:42 2007 +0200
@@ -376,7 +376,7 @@
                 else:
                     link = "%s/%4d-%02d-%02d" % (page, year, month, day)
                 daypage = Page(request, link)
-                if daypage.exists():
+                if daypage.exists() and request.user.may.read(link):
                     csslink = "cal-usedday"
                     query = {}
                     r, g, b, u = (255, 0, 0, 1)