[Zope-CMF] dcworkflow variables and security ManagePortal

[Sune Brøndum Wøller]

hi,
i'm using a variable to get access to the state title
instead of just the state id, as described on
this list:
http://mail.zope.org/pipermail/zope-cmf/2001-November/010473.html

except that doesn't work, it gives the previous
state title. This works:
a variable called state_title, with default expression:
     state_change/new_state/title | nothing



Here comes the real problem:

BUT, apparently you are only allowed to 'work with'
variables if you have the permission
"ManagePortal". When my normal members submit content
the state_title variable is set to None. When i give the member-role
the permission "ManagePortal" it works, the variable is updated on
every transition.


In the code Variables.py:

class VariableDefinition (SimpleItem):
    meta_type = 'Workflow Variable'

    security = ClassSecurityInfo()
    security.declareObjectProtected(ManagePortal)
...



Why is this so ?
I guess it should be changed... ?

I use:
Zope 2.6.2
CMF 1.4.2


--
Sune B. Wøller