[Zope] Re: proxy role for an external method

[Tres Seaver]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jens Vagelpohl wrote:
> 
> On 10 Oct 2005, at 23:14, Peter Bengtsson wrote:
> 
>>> I understood that Plone does some extra magic, so I have to setup a
>>> securoty context... I'll post it here if I have a working solution
>>>
>>>
>> Shouldn't really be the problem. Isn't portal_catalog just another
>> ZCatalog that has nothing to do with Plone except it's located inside
>> a Plone instance.
> 
> 
> It *is* a problem. The reason is most likiely all the extra stuff the 
> catalog tool adds to the query before it reaches the actual catalog. 
> The workaround is something like this:
> 
> from Products.ZCatalog.ZCatalog import ZCatalog
> results = ZCatalog.searchResults(portal_catalog, **kws)
> 
> That way you circumvent any query munging done in the catalog tool 
> searchResults method, specifically the effective/expires and 
> allowedRolesAndUsers filtering.

CMF's CatalogTool grep an 'unrestrictedSearchResults' method which
does exactly that -- it can only be called from trusted code, but an
ExternalMethod certainly qualifies.


Tres.
- --
===================================================================
Tres Seaver          +1 202-558-7113          tseaver at palladion.com
Palladion Software   "Excellence by Design"    http://palladion.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDS7f5+gerLs4ltQ4RAhkSAKC7zy58wb+UmoiFb0e5fhCRB9SjSgCgzkRK
qIGTnVO1neNoaAD1hr9T/Og=
=T5H3
-----END PGP SIGNATURE-----