DigitalPianism_ExportReview - Version 0.1.2

Version Notes

- Add _isAllowed method to the controller to improve security (see patch 6285)

Download this release

Release Info

Developer Digital Pianism
Extension DigitalPianism_ExportReview
Version 0.1.2
Comparing to
See all releases


Code changes from version 0.1.1 to 0.1.2

Files changed (3) hide show
  1. app/code/community/DigitalPianism/ExportReview/controllers/Adminhtml/ExportreviewController.php +16 -0
  2. app/code/community/DigitalPianism/ExportReview/etc/config.xml +1 -1
  3. package.xml +5 -5
app/code/community/DigitalPianism/ExportReview/controllers/Adminhtml/ExportreviewController.php CHANGED
@@ -6,6 +6,22 @@
6
  */
7
  class DigitalPianism_ExportReview_Adminhtml_ExportreviewController extends Mage_Adminhtml_Controller_Action
8
  {
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
9
  public function massCsvExportAction()
10
  {
11
  $reviewIds = $this->getRequest()->getParam('reviews');
6
  */
7
  class DigitalPianism_ExportReview_Adminhtml_ExportreviewController extends Mage_Adminhtml_Controller_Action
8
  {
9
+ /**
10
+ * @return mixed
11
+ */
12
+ protected function _isAllowed()
13
+ {
14
+ $action = strtolower($this->getRequest()->getActionName());
15
+ switch ($action) {
16
+ case 'pending':
17
+ return Mage::getSingleton('admin/session')->isAllowed('catalog/reviews_ratings/reviews/pending');
18
+ break;
19
+ default:
20
+ return Mage::getSingleton('admin/session')->isAllowed('catalog/reviews_ratings/reviews/all');
21
+ break;
22
+ }
23
+ }
24
+
25
  public function massCsvExportAction()
26
  {
27
  $reviewIds = $this->getRequest()->getParam('reviews');
app/code/community/DigitalPianism/ExportReview/etc/config.xml CHANGED
@@ -3,7 +3,7 @@
3
 
4
  <modules>
5
  <DigitalPianism_ExportReview>
6
- <version>0.1.1</version>
7
  </DigitalPianism_ExportReview>
8
  </modules>
9
 
3
 
4
  <modules>
5
  <DigitalPianism_ExportReview>
6
+ <version>0.1.2</version>
7
  </DigitalPianism_ExportReview>
8
  </modules>
9
 
package.xml CHANGED
@@ -1,18 +1,18 @@
1
  <?xml version="1.0"?>
2
  <package>
3
  <name>DigitalPianism_ExportReview</name>
4
- <version>0.1.1</version>
5
  <stability>stable</stability>
6
  <license uri="http://opensource.org/licenses/osl-3.0.php">OSL v3.0</license>
7
  <channel>community</channel>
8
  <extends/>
9
  <summary>Export Reviews to CSV/Excel for Magento.</summary>
10
  <description>This extension allows users to export customer reviews in both CSV / Excel types.</description>
11
- <notes>- Modify the admin route regarding Magento patch SUPEE-6788</notes>
12
  <authors><author><name>Digital Pianism</name><user>raphaelpetrini</user><email>raphael.petrini@free.fr</email></author></authors>
13
- <date>2015-10-23</date>
14
- <time>16:34:01</time>
15
- <contents><target name="magecommunity"><dir name="DigitalPianism"><dir name="ExportReview"><dir name="Model"><file name="Observer.php" hash="bbe85c297f231af42da1dfc737ea0c86"/></dir><dir name="controllers"><dir name="Adminhtml"><file name="ExportreviewController.php" hash="666e6ae43424d50ad4080854ba6ed547"/></dir></dir><dir name="etc"><file name="config.xml" hash="cbc990ceb20cf5a137b8aac780cefa13"/></dir></dir></dir></target><target name="mageetc"><dir name="modules"><file name="DigitalPianism_ExportReview.xml" hash="4f5f0512a60878f5d25ffd2d12da2265"/></dir></target></contents>
16
  <compatible/>
17
  <dependencies><required><php><min>4.1.0</min><max>6.0.0</max></php></required></dependencies>
18
  </package>
1
  <?xml version="1.0"?>
2
  <package>
3
  <name>DigitalPianism_ExportReview</name>
4
+ <version>0.1.2</version>
5
  <stability>stable</stability>
6
  <license uri="http://opensource.org/licenses/osl-3.0.php">OSL v3.0</license>
7
  <channel>community</channel>
8
  <extends/>
9
  <summary>Export Reviews to CSV/Excel for Magento.</summary>
10
  <description>This extension allows users to export customer reviews in both CSV / Excel types.</description>
11
+ <notes>- Add _isAllowed method to the controller to improve security (see patch 6285)</notes>
12
  <authors><author><name>Digital Pianism</name><user>raphaelpetrini</user><email>raphael.petrini@free.fr</email></author></authors>
13
+ <date>2015-10-29</date>
14
+ <time>10:07:18</time>
15
+ <contents><target name="magecommunity"><dir name="DigitalPianism"><dir name="ExportReview"><dir name="Model"><file name="Observer.php" hash="bbe85c297f231af42da1dfc737ea0c86"/></dir><dir name="controllers"><dir name="Adminhtml"><file name="ExportreviewController.php" hash="323cde9306e03aa3a69aa2e5d1058093"/></dir></dir><dir name="etc"><file name="config.xml" hash="3791a4c0708142787aef0e50b7f0c180"/></dir></dir></dir></target><target name="mageetc"><dir name="modules"><file name="DigitalPianism_ExportReview.xml" hash="4f5f0512a60878f5d25ffd2d12da2265"/></dir></target></contents>
16
  <compatible/>
17
  <dependencies><required><php><min>4.1.0</min><max>6.0.0</max></php></required></dependencies>
18
  </package>