[Zope-dev] Re: CatalogBrains since Zope2.7.1b1

Leonardo Rochael Almeida leo at hiper.com.br
Sat Jun 19 19:14:47 EDT 2004


On Wed, 16 Jun 2004 11:16:55 +0200
> Eric Brun <eric.brun at pentila.com> wrote:
> 
> > 
> > 
> > Hi,
> > 
> > I have a problem with 'getObject' method of CatalogBrains class on
> > Zope271b1 : it's return None. But with a Zope2.7.0 my object is
> > correctly find and returned. The permissions are right.
> 

Em Qua, 2004-06-16 às 11:28, Casey Duncan escreveu:
> getObject was refactored recently and its security was increased. It
> uses restrictedTraverse() now, which means that you need access to all
> of the enclosing folders as well as the object. Before, no security
> checking was performed by getObject.
> 
> I suspect you do not have access to one of the containing folders.

I certainly hope he'd get a permission error instead of silent 'None'
for '.getObject()' in this case or I'd consider it a bug :-)

Cheers, Leo

-- 
Leonardo Rochael Almeida <leo at hiper.com.br>



More information about the Zope-Dev mailing list