[Zope-dev] ZCatalog madness. (Must log in as emergencyuser.)

[Chris McDonough]

You can get the object, but you can't do anything with it.

----- Original Message -----
From: "Steve Alexander" <steve@cat-box.net>
To: "Chris McDonough" <chrism@digicool.com>
Cc: "Erik Enge" <erik@esol.no>; <zope-dev@zope.org>; <jens@digicool.com>
Sent: Thursday, February 22, 2001 12:38 PM
Subject: Re: [Zope-dev] ZCatalog madness. (Must log in as emergencyuser.)


> Chris McDonough wrote:
>
> > I'm not sure why this isn't in 2.3.1b1, but yes, the code in getobject
was
> > changed to use unrestrictedTraverse for this very reason.
>
> Does that open up a security hole?
>
> Can I get to an object via the getobject method of ZCatalog that I can't
get to otherwise?
>
> I thought that was the reason it was changed to restrictedTraverse in the
first place.
>
>
> --
> Steve Alexander
> Software Engineer
> Cat-Box limited
> http://www.cat-box.net
>
>
> _______________________________________________
> Zope-Dev maillist  -  Zope-Dev@zope.org
> http://lists.zope.org/mailman/listinfo/zope-dev
> **  No cross posts or HTML encoding!  **
> (Related lists -
>  http://lists.zope.org/mailman/listinfo/zope-announce
>  http://lists.zope.org/mailman/listinfo/zope )
>