[Zope-Checkins] SVN: Zope/trunk/lib/python/AccessControl/User.py _check_context() wasn't called for authenticated users

[Andreas Jung]

Log message for revision 29557:
  _check_context() wasn't called for authenticated users
  

Changed:
  U   Zope/trunk/lib/python/AccessControl/User.py

-=-
Modified: Zope/trunk/lib/python/AccessControl/User.py
===================================================================
--- Zope/trunk/lib/python/AccessControl/User.py	2005-03-18 12:32:52 UTC (rev 29556)
+++ Zope/trunk/lib/python/AccessControl/User.py	2005-03-18 13:43:28 UTC (rev 29557)
@@ -182,7 +182,8 @@
         # role and user is not nobody
         if 'Authenticated' in object_roles and (
             self.getUserName() != 'Anonymous User'):
-            return 1
+            if self._check_context(object):
+                return 1
 
         # Check for ancient role data up front, convert if found.
         # This should almost never happen, and should probably be