Re: [Zope-dev] CatalogBrains.getObject and unrestricted code

2004-11-29 Thread Florent Guillaume
Yes, http://collector.zope.org/Zope/1534 is related. But in any case if getObject returns a subset of available objects (and None or Unauthorized for the others), we still needs a _getObject method that returns all of them, for unrestricted code. Florent Andreas Jung wrote: --On Montag, 29. Nov

Re: [Zope-dev] CatalogBrains.getObject and unrestricted code

2004-11-29 Thread Andreas Jung
--On Montag, 29. November 2004 18:15 Uhr +0100 Florent Guillaume <[EMAIL PROTECTED]> wrote: In ZCatalog's brains, getObject currently does a restrictedTraverse to get the object. That's a problem for unrestricted code that needs to get to the object nevertheless, even if the user cannot get to i

[Zope-dev] CatalogBrains.getObject and unrestricted code

2004-11-29 Thread Florent Guillaume
In ZCatalog's brains, getObject currently does a restrictedTraverse to get the object. That's a problem for unrestricted code that needs to get to the object nevertheless, even if the user cannot get to it. For instance CMF is impacted, when it tries to reindex the security of all subobjects of