[Zope3-Users] Security in Code, example, why does this work?

[Michael Howitz]

Reinhold Strobl wrote:
> Hi,
(...)
> 
> So can code always access everything, or not?

In Zope 3 there is also the concept of trusted and untrusted code like 
in Zope 2

See
http://dev.zope.org/Wikis/DevSite/Projects/ComponentArchitecture/ShortTutorial/short.pdf
pages 88 - 94 (esp. page 94)

In trusted code no permissions are checked. So you may have to check 
manually before entering trusted code.
I think that you call a method of your model-code from with-in the 
view-code. Thats the entrace to trusted code.

Hope that helps a bit,
  mac