Chris McDonough wrote:

> I'm not sure why this isn't in 2.3.1b1, but yes, the code in getobject was
> changed to use unrestrictedTraverse for this very reason.

Does that open up a security hole?

Can I get to an object via the getobject method of ZCatalog that I can't get to 
otherwise?

I thought that was the reason it was changed to restrictedTraverse in the first place.


--
Steve Alexander
Software Engineer
Cat-Box limited
http://www.cat-box.net


_______________________________________________
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

Reply via email to