[Zope] Difference between getItem and restrictedTraverse
Dieter Maurer
dieter@handshake.de
Fri, 30 Nov 2001 22:25:21 +0100
Sven Hohage writes:
> When I switch <dtml-with "_.getitem(obj)"> with <dtml-with
> "restrictedTraverse(obj,None)">
> Zope accepts the VIP-Role and shows the frame.
I have seen this, too:
"restrictedTraverse" seems to be less strictly checking permissions
the DTML access.
This may be a bug, but I have been happy about this.
It allowed me to access the property sheets of a ZClass
(the class itself, not its instances).
Dieter