[Zope-Checkins] CVS: Packages/AccessControl - ZopeGuards.py:1.6
Chris McDonough
chrism@zope.com
Wed, 8 Aug 2001 13:49:01 -0400
Update of /cvs-repository/Packages/AccessControl
In directory cvs.zope.org:/tmp/cvs-serv27844
Modified Files:
ZopeGuards.py
Log Message:
Fixed spot in guarded_getitem which inappropriately short-circuited some security checks (also fixes Collector 2483), thanks to Matt Behrens.
=== Packages/AccessControl/ZopeGuards.py 1.5 => 1.6 ===
return v
v = object[index]
- if Containers(type(object)):
+ if Containers(type(object)) and Containers(type(v)):
# Simple type. Short circuit.
return v
if getSecurityManager().validate(object, object, index, v):