collective/Products.Ploneboard — pull request #33 by cekk (2013-11-22 15:34:39+00:00)
Title: Edit attachment fix

If a normal user can edit his rejected or retracted comment, he can also upload some files or images with SimpleAttachment field.

With old workflow, no one can add contents to Comments, and if the user try to upload a file, an Unauthorized exception will be raised.

With this fix, only the owner of a comment can upload attachments.

I've also updated tests for comment edit.