# HG changeset patch
# User Sylvain Thénault <sylvain.thenault@logilab.fr>
# Date 1276087485 -7200
# Node ID 24ca7615379b588e7fc2d7db732b1c3315d89325
# Parent  9fb240cf0f6179d6f6137217dca5b6cc17b2dbb5
[security] consider any rql expression refering to X while X is being created as satisfied

diff -r 9fb240cf0f61 -r 24ca7615379b schema.py
--- a/schema.py	Wed Jun 09 14:31:12 2010 +0200
+++ b/schema.py	Wed Jun 09 14:44:45 2010 +0200
@@ -845,11 +845,9 @@
             except KeyError:
                 pass
         rql, has_perm_defs, keyarg = self.transform_has_permission()
-        if creating:
-            # when creating an entity, consider has_*_permission satisfied
-            if has_perm_defs:
-                return True
-            return False
+        # when creating an entity, expression related to X satisfied
+        if creating and 'X' in self.rqlst.defined_vars:
+            return True
         if keyarg is None:
             kwargs.setdefault('u', session.user.eid)
             try: