From d54b1b4d86037c2bfc243c77043e2d2db919c4d3 Mon Sep 17 00:00:00 2001
From: Ingo Schommer <ingo@silverstripe.com>
Date: Tue, 30 Oct 2012 23:34:29 +0100
Subject: [PATCH] API Removed permission checks from XML/JSON data formatters

Please handle those checks in the logic using the formatters
instead. Applied permission checks to its primary use case,
the "restfulserver" module.
---
 api/XMLDataFormatter.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api/XMLDataFormatter.php b/api/XMLDataFormatter.php
index 205488d92..af407ad17 100644
--- a/api/XMLDataFormatter.php
+++ b/api/XMLDataFormatter.php
@@ -139,7 +139,7 @@ class XMLDataFormatter extends DataFormatter {
 		$xml = "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n";
 		$xml .= (is_numeric($this->totalSize)) ? "<$className totalSize=\"{$this->totalSize}\">\n" : "<$className>\n";
 		foreach($set as $item) {
-			if($item->canView()) $xml .= $this->convertDataObjectWithoutHeader($item, $fields);
+			$xml .= $this->convertDataObjectWithoutHeader($item, $fields);
 		}
 		$xml .= "</$className>";