[Zope-dev] ZCatalog getObject broken

[Dieter Maurer]

Roché Compaan wrote at 2005-3-3 09:53 +0200:
> ...
>-        return self.aq_parent.restrictedTraverse(self.getPath(), None)
>+        obj = self.aq_parent.unrestrictedTraverse(self.getPath(), None)
>+        if obj and securityManager.validate(obj, obj, None, None):

I think this is not correct: "validate" needs at least a
"value" parameter (this is the forth parameter).

There is a "validateValue" method (instead of "validate")
that does what you want. You find it in "AccessControl/ImplPython.py".

Drawback: it might disappear in Zope 2.8.

-- 
Dieter