[Zope-dev] Re: PermissionGeddon

[Florent Guillaume]

Dieter Maurer wrote:
>>The first change is in the manage_pasteObjects method of CopyContainer. 
>>There are some _setObject and _delObject calls which grew a new 
>>suppress_events parameter. This breaks the reference implementation of 
>>Archetypes because it uses something based on BTreeFolder2 to store 
>>references and BTreeFolder2 overwrites both _setObject and _delObject 
>>with its own versions.
> 
> 
> Several "Folder" like classes are likely to overwrite
> "_setObject" and "_delObject".
> Maybe, the code that calls these methods with an additional parameter
> should be prepared to meet implementations that do not support
> the extra parameter.

Maybe. But on the other hand I'd rather not have object manager code 
slowed down and uglified to suit the negligibly small number of classes 
that are in this case, and that can be trivialy upgraded in a 
forward-compatible manner.

Florent

-- 
Florent Guillaume, Nuxeo (Paris, France)   Director of R&D
+33 1 40 33 71 59   http://nuxeo.com   fg at nuxeo.com