[z3-five] Security bug in browser menus?
Philipp von Weitershausen
philipp at weitershausen.de
Sun Jul 10 13:44:14 CEST 2005
Hi,
I think I have found a bug regarding menu items in Five. Basically,
unless the menu item isn't protected with zope.Public, it will never
show up. I can verify this in a test
(http://codespeak.net/svn/z3/Five/trunk/browser/tests/test_menu.py) and
it looks like CMFonFive's tests back up my theory. What I would like to
know is if you guys have experienced the same.
An explanation of what's wrong and how I think it should be fixed is
explained as a big comment in the above test case. If I won't hear
anything about this issue, I'll assume that noone is using menu items
yet and I'll go ahead and fix the issue to make the corrected test pass.
Philipp
More information about the z3-five
mailing list