[CMF-checkins] CVS: CMF/CMFUid - interfaces.py:1.9
Grégoire Weber
zope.org at incept.ch
Fri Aug 6 17:07:03 EDT 2004
Update of /cvs-repository/CMF/CMFUid
In directory cvs.zope.org:/tmp/cvs-serv3090
Modified Files:
interfaces.py
Log Message:
- better comment explaning what's dangerous when using the unrestricted method signature
=== CMF/CMFUid/interfaces.py 1.8 => 1.9 ===
--- CMF/CMFUid/interfaces.py:1.8 Fri Aug 6 16:58:52 2004
+++ CMF/CMFUid/interfaces.py Fri Aug 6 17:07:03 2004
@@ -141,7 +141,11 @@
objects regardless of the roles the caller has.
CAUTION: Care must be taken not to open security holes by exposing
- this to non authorized callers!
+ the results of these methods to non authorized callers!
+
+ If you're in doubth if you should use this method signature or
+ the restricted ones ('IUniqueIdQuery' and 'IUniqueIdBrainQuery')
+ use the latter!
Returning a brain is more efficient than returning the object.
A brain usually exposes only parts of the object and should only
More information about the CMF-checkins
mailing list