[Zope3-Users] Security between Context and View

[Dominik Huber]

Klaus Bremer wrote:
> You can try to bypass the zope security mechanism by using
> 'removeSecurityProxy':
>
>
> from zope.security.proxy import removeSecurityProxy
>
> ...
> def doTransaction(self):
>     transaction = removeSecurityProxy(self.context.produceTransaction())
> ...
>   
If possible it's better to use trusted adapters for that purpose.

<adapter
    ...
    trusted="True" />

Regular adapters (such as regular views too) are not security proxied, 
but the underlying context is security proxied. Trusted adapters are 
security proxied but the underlying is not.

Regards,
Dominik