[Zope] copy/paste from PythonScript

[Dieter Maurer]

G=E1l L=E1szl=F3 writes:
 > I have a PytonScript with proxy role 'Manager', and it's ok, it can ad=
d any product to the container,
 > but container.manage_copyObjects, manage_pasteObjects and manage_clone=
 ask for manager password.
 > Is it a bug?
It is known, reported to the (old) collector (now maybe lost):

   "verifyObjectPaste" is implemented in unrestricted Python code.
   I does not know anything about the proxy roles the caller has.
   I makes checks only on based on the current user.


Dieter