On Fri, 25 Jun 2004 20:26:30 +0200
Dieter Maurer <[EMAIL PROTECTED]> wrote:
> Casey Duncan wrote at 2004-6-25 09:36 -0400:
> >On Thu, 24 Jun 2004 19:04:55 +0200
> >Dieter Maurer <[EMAIL PROTECTED]> wrote:
> > ...
> >> I think, you should only require access rights to the object itself
> >> and not to all folders from the root to the object.
> > ...
> >> That ZCatalog identifies objects by physical path is an
> >implementation> artifact. It should not make it impossible to access
> >an> object via the catalog that otherwise can be accessed without
> >> problem.
> >> > ...
> >> >For hysterical raisins, REQUEST.traverse() does not behave this
> >way.> >It instead checks only the final object traversed.
> >> That's a good behaviour...
> >Except when it isn't ;^) OTOH it is closer to the behavior of
> >getObject in 2.7.0. Ironically it used to use restrictedTraverse long
> Have you gotten the main argument?
Yes, I intend to change it to use unrestrictedTraverse and then validate
the returned object.
So there... 8^P
Zope-Dev maillist - [EMAIL PROTECTED]
** No cross posts or HTML encoding! **
(Related lists -