Re: [Zope-dev] App.Permission security hole

2003-05-29 Thread Shane Hathaway
Jamie Heilman wrote: Tooling through restructuring of my site I discovered a stupid permissions problem. While App.Permission declares the 'Define permission' perm it never gets initialized and thus manage_addPermission{,Form} basically had weakened security. The permission 'Access contents

[Zope-dev] App.Permission security hole

2003-05-27 Thread Jamie Heilman
Tooling through restructuring of my site I discovered a stupid permissions problem. While App.Permission declares the 'Define permission' perm it never gets initialized and thus manage_addPermission{,Form} basically had weakened security. The permission 'Access contents information' was still