Re: [Zope] Difference between getItem and restrictedTraverse

Sven Hohage writes:

When I switch <dtml-with "_.getitem(obj)"> with <dtml-with "restrictedTraverse(obj,None)"> Zope accepts the VIP-Role and shows the frame. I have seen this, too:

"restrictedTraverse" seems to be less strictly checking permissions the DTML access. This may be a bug, but I have been happy about this. It allowed me to access the property sheets of a ZClass (the class itself, not its instances). Dieter