Mercurial Mercurial > pub > hg > cubicweb / changeset
summary | shortlog | changelog | graph | tags | bookmarks | branches | files | changeset | raw | zip | gz | bz2 | help
Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
merge
authorsylvain.thenault@logilab.fr
Tue, 27 Jan 2009 13:58:17 +0100
changeset 478 49dfd0bb422c
parent 474 c9b0c3c06be0 (current diff)
parent 477 79eccee30049 (diff)
child 479 ac5c9442b1fd
merge
common/entity.py file | annotate | diff | comparison | revisions 
--- a/common/entity.py	Tue Jan 27 13:05:38 2009 +0100
+++ b/common/entity.py	Tue Jan 27 13:58:17 2009 +0100
@@ -391,6 +391,10 @@
         res['source'] = self.req.source_defs()[res['source']]
         return res
 
+    def clear_local_perm_cache(self, action):
+        for rqlexpr in self.e_schema.get_rqlexprs(action):
+            self.req.local_perm_cache.pop((rqlexpr.eid, (('x', self.eid),)), None)
+
     def check_perm(self, action):
         self.e_schema.check_perm(self.req, action, self.eid)
 
--- a/server/securityhooks.py	Tue Jan 27 13:05:38 2009 +0100
+++ b/server/securityhooks.py	Tue Jan 27 13:58:17 2009 +0100
@@ -54,6 +54,7 @@
             entity.check_perm('update')
             check_entity_attributes(session, entity)
         except Unauthorized:
+            entity.clear_local_perm_cache('update')
             CheckEntityPermissionOp(session, entity=entity, action='update')
         
 def before_del_entity(session, eid):
cubicweb