[z3-five] Security bug in browser menus?
Sidnei da Silva
sidnei at enfoldsystems.com
Sun Jul 10 18:05:46 CEST 2005
On Sun, Jul 10, 2005 at 05:29:46PM +0200, Philipp von Weitershausen wrote:
| >I'm supposed to start using menu items somewhere between now and
| >mid-august. If there's no rush I can look at the issue.
|
| Actually, I wasn't looking so much for bugfixers but for feedback
| whether people actually did experience the same problem. But thanks for
| the offer :)
|
| As for the bugfix, I think the more appropriate way of dealing with the
| issue is the second option discussed in the test comment, namely,
| decorating Zope2's security manager so that
| getInteraction().checkPermission(z3_permission) will call the security
| manager's checkPermission(z2_permission=z3_permission.title).
Sounds good to me.
--
Sidnei da Silva
Enfold Systems, LLC.
More information about the z3-five
mailing list