--On 5. Juli 2007 14:24:30 +0200 Jonas Meurer <[EMAIL PROTECTED]> wrote:
On 05/07/2007 Stefan H. Holek wrote:I may be missing something here, but the fact that you have to use POST is fully intentional and not a "bug".Yes, but it seems like this is not the case for the module AccessControl. It uses GET and therefore produces a bug. That's what the patch from http://mail.zope.org/pipermail/zope-checkins/2007-March/032104.html seems to fix. My only question is when this patch will be merged into a stable 2.10 release.
As far as I can see the patch has been applied to the Z.10 branch in a slight different form using a @postonly decorator.
Description: PGP signature
_______________________________________________ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )