Ingo Schommer fb784af738 API Enforce $allowed_actions in RequestHandler->checkAccessAction()
See discussion at https://groups.google.com/forum/?fromgroups#!topic/silverstripe-dev/Dodomh9QZjk

Fixes an access issue where all public methods on FormField were allowed,
and not checked for $allowed_actions. Before this patch you could e.g.
call FormField->Value() on the first field by using action_Value.

Removes the following assertion because it only worked due to RequestHandlingTest_AllowedControllerExtension
*not* having $allowed_extensions declared: "Actions on magic methods are only accessible if explicitly allowed on the controller."
2013-06-24 14:50:40 +02:00
..
2012-10-30 18:59:26 +01:00
2013-04-18 19:28:13 +02:00
2012-11-16 14:45:20 +13:00
2011-10-18 15:32:52 -07:00
2011-10-18 15:32:52 -07:00
2011-10-18 11:54:45 +02:00
2012-01-31 17:04:59 +01:00
2012-10-30 17:00:41 +01:00
2012-10-30 17:00:41 +01:00
2012-10-30 17:00:41 +01:00
2013-02-18 01:03:57 +01:00
2012-07-31 16:42:40 +12:00
2012-11-26 11:20:21 +13:00
2013-02-18 01:34:51 +01:00
2013-02-20 00:39:00 +01:00