[Zope] Re: ZClasses and Permissions (Zope Collector 444)

[Dieter Maurer]

Brent Hendricks writes:
 > ...
 > It looks like _verifyObjectPaste is calling
 > 
 > getSecurityManager().checkPermission( mt_permission, self ), and this is 
 > failing.  Digging through the source code a bit, it doesn't look like 
 > checkPermission() check for proxy roles.  In fact, looking at the 
 > current CVS HEAD, there's even a comment to this effect:
 > 
 > "# XXX proxy roles and executable owner are not checked"
The well known bug....


Dieter