Products.GenericSetup 1.4.5: "manage_importAllSteps" unprotected

[Dieter Maurer]

In "Products.GenericSetup 1.4.5" "manage_importAllSteps" seems to lack a security declaration: the code looks like:

    security.declareProtected(ManagePortal, 'manage_importSelectedSteps')
    def manage_importAllSteps(self, context_id=None):

... apparently a copy and paste error.

[Tres Seaver (tseaver)]

Thanks for the report. I have confirmed that the method cannot be
called either via URL or from untrusted code without appropriate permissions.

I am therefore clearing the "security vulnerability" flag on the issue.

[Tres Seaver (tseaver)]

Fix committed to the trunk for 1.6.4.