Federico Schwindt wrote:
> The attached diff against 2.11.2 fixes it. This probably needs to be
> applied to zope3 as well.
>
> f.-
>
> ** Attachment added: "174705.diff"
> http://launchpadlibrarian.net/20101336/174705.diff
Actually, that fix is not relevant for Zope3's security machinery. We
would be better off adding the
'__allow_access_to_unrestricted_subobjects__' attribute to the
Zope2-specific subclass, Products.PageTemplates.Expressions.ZopeContext,
along with a unit test.
Tres.
- --
===================================================================
Tres Seaver +1 540-429-0999 <email address hidden>
Palladion Software "Excellence by Design" http://palladion.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Federico Schwindt wrote: launchpadlibrar ian.net/ 20101336/ 174705. diff
> The attached diff against 2.11.2 fixes it. This probably needs to be
> applied to zope3 as well.
>
> f.-
>
> ** Attachment added: "174705.diff"
> http://
Actually, that fix is not relevant for Zope3's security machinery. We access_ to_unrestricted _subobjects_ _' attribute to the PageTemplates. Expressions. ZopeContext,
would be better off adding the
'__allow_
Zope2-specific subclass, Products.
along with a unit test.
Tres. ======= ======= ======= ======= ======= ======= ======= ======= ==== palladion. com enigmail. mozdev. org
- --
=======
Tres Seaver +1 540-429-0999 <email address hidden>
Palladion Software "Excellence by Design" http://
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://
iD8DBQFJNCB8+ gerLs4ltQ4RAk3w AJ9e8wWt5BdTj59 reF/CT8orOtBSDQ Cfcsi3 8cQJAEC0=
8TfvBSKy1VkWHJA
=bt0M
-----END PGP SIGNATURE-----