Make sure that viewing permissions are obeyed in the method, and that the DataForm just doesn't hide the link. Fixes bug #12353.

perlDreamer · perlDreamer · commit 70c993916982 · 2012-04-17T19:02:12.000-07:00
diff --git a/docs/changelog/7.x.x.txt b/docs/changelog/7.x.x.txt
@@ -13,6 +13,7 @@
  - fixed: encryptLogin and sslEnabled both need to be true
  - fixed: Cache's setByHTTP method returns content, even when it gets an error in the request.  This gives the SC asset fits.
  - fixed #12349: Friends invitation error
+ - fixed #12353: Dataform List mode
 
 7.10.24
  - fixed #12318: asset error causes asset manager to fail
diff --git a/lib/WebGUI/Asset/Wobject/DataForm.pm b/lib/WebGUI/Asset/Wobject/DataForm.pm
@@ -1280,6 +1280,8 @@ Renders the list view of the DataForm.
 
 sub viewList {
     my $self    = shift;
+    return $self->session->privilege->insufficient
+        unless $self->session->user->isInGroup($self->get("groupToViewEntries"));
     my $var     = $self->getTemplateVars;
     return $self->processTemplate($self->getListTemplateVars($var), undef, $self->{_viewListTemplate});
 }

Original file line number	Diff line number	Diff line change
`@@ -1280,6 +1280,8 @@ Renders the list view of the DataForm.`
`1280`	`1280`
`1281`	`1281`	`sub viewList {`
`1282`	`1282`	`my $self = shift;`
	`1283`	`+ return $self->session->privilege->insufficient`
	`1284`	`+ unless $self->session->user->isInGroup($self->get("groupToViewEntries"));`
`1283`	`1285`	`my $var = $self->getTemplateVars;`
`1284`	`1286`	`return $self->processTemplate($self->getListTemplateVars($var), undef, $self->{_viewListTemplate});`
`1285`	`1287`	`}`