[Zope-CMF] TypesTool and object construction
Florent Guillaume
fg at nuxeo.com
Thu Jul 8 10:09:38 EDT 2004
In article <40EADA6B.3050107 at nuxeo.com> you write:
> Is it ok if I refactor a bit object construction in TypesTool ? Today
> all methods constructing objects (invokeFactory, constructContent) do a
> security check on the current user. This makes it impossible to create
> objects from unrestricted code on behalf of others or things like that.
>
> Because of this for instance createMemberArea has to call
> manage_addPortalFolder instead of doing a proper CMF object creation.
> Also in CPS security checks for object creation are done differently and
> I'd like to bypass the standard ones easily.
>
> I'll make private _constructInstance's that do no security checks, and a
> private _constructContent too.
Ok I've done these refactorings (now a _constructInstance is available,
_constructContent is not really needed), which also enabled moving
constructInstance into the base class. Hope all is ok.
Florent
--
Florent Guillaume, Nuxeo (Paris, France)
+33 1 40 33 79 87 http://nuxeo.com mailto:fg at nuxeo.com
More information about the Zope-CMF
mailing list