diff --git a/news/94.bugfix.rst b/news/94.bugfix.rst new file mode 100644 index 00000000..02cd4a24 --- /dev/null +++ b/news/94.bugfix.rst @@ -0,0 +1 @@ +Protect the pas_search view with the ``cmf.ListPortalMembers`` permission [ale-rt] diff --git a/src/Products/PlonePAS/browser/configure.zcml b/src/Products/PlonePAS/browser/configure.zcml index f6cac731..6eff23b7 100644 --- a/src/Products/PlonePAS/browser/configure.zcml +++ b/src/Products/PlonePAS/browser/configure.zcml @@ -31,7 +31,7 @@ for="*" class=".search.PASSearchView" allowed_interface="Products.PlonePAS.interfaces.browser.IPASSearchView" - permission="zope2.View" + permission="cmf.ListPortalMembers" />