[ZCM] [ZC] 338/ 3 Assign "security.declareProtected misbehaviour"

[Collector: Zope Bugs, Features, and Patches ...]

Issue #338 Update (Assign) "security.declareProtected misbehaviour"
 Status Accepted, Zope/bug medium
To followup, visit:
  http://collector.zope.org/Zope/338

==============================================================
= Assign - Entry #3 by Brian on Oct 21, 2003 9:42 am

 Status: Pending => Accepted

 Supporters added: Brian

Fixed on the head, 2.6 and 2.7 branches
________________________________________
= Comment - Entry #2 by leper on Jul 6, 2003 6:22 am

issue 761 proves this has bitten people

patch: http://audible.transient.net/zope/safersecapi.diff
________________________________________
= Request - Entry #1 by d.maurer on Apr 10, 2002 4:26 am

"AccessControl.ClassSecurityInfo.declareProtected(perm)" behaves like "AccessControl.ClassSecurityInfo.declareObjectProtected(perm)".

This unexpected behaviour can lead to hours of analysis of difficult security errors and
be a potential security hazzard.
==============================================================