# HG changeset patch
# User Sylvain Thénault <sylvain.thenault@logilab.fr>
# Date 1253621301 -7200
# Node ID 62ed9981a7703c672ec355c86f8e36f2157fd5dd
# Parent  f077f4dfef9f2198b74eb0b78c6e4171dab81d93
[notification] use super_session to select the recipients finder

diff -r f077f4dfef9f -r 62ed9981a770 common/mail.py
--- a/common/mail.py	Tue Sep 22 11:13:55 2009 +0200
+++ b/common/mail.py	Tue Sep 22 14:08:21 2009 +0200
@@ -210,7 +210,13 @@
         """return a list of either 2-uple (email, language) or user entity to
         who this email should be sent
         """
-        finder = self.vreg['components'].select('recipients_finder', self.req,
+        # use super_session when available, we don't want to consider security
+        # when selecting recipients_finder
+        try:
+            req = self.req.super_session
+        except AttributeError:
+            req = self.req
+        finder = self.vreg['components'].select('recipients_finder', req,
                                                 rset=self.rset,
                                                 row=self.row or 0,
                                                 col=self.col or 0)