[Checkins] SVN: z3c.layer.pagelet/trunk/src/z3c/layer/pagelet/tests/bugfixes.txt added forgotten checkin

Michael Howitz mh at gocept.com
Sat Feb 21 09:01:43 EST 2009


Log message for revision 96923:
  added forgotten checkin
  

Changed:
  A   z3c.layer.pagelet/trunk/src/z3c/layer/pagelet/tests/bugfixes.txt

-=-
Added: z3c.layer.pagelet/trunk/src/z3c/layer/pagelet/tests/bugfixes.txt
===================================================================
--- z3c.layer.pagelet/trunk/src/z3c/layer/pagelet/tests/bugfixes.txt	                        (rev 0)
+++ z3c.layer.pagelet/trunk/src/z3c/layer/pagelet/tests/bugfixes.txt	2009-02-21 14:01:43 UTC (rev 96923)
@@ -0,0 +1,26 @@
+==========
+ Bugfixes
+==========
+
+Traversed objects where not security proxied
+============================================
+
+When an object got traversed its security proxy was removed, so its
+sub-objects could be publically accessed. To show that this behavior
+was fixed we put a folder into the root folder and look at its
+contents using a view:
+
+  >>> import zope.site.folder
+  >>> getRootFolder()['test'] = zope.site.folder.Folder()
+
+  >>> from zope.testbrowser.testing import Browser
+  >>> manager = Browser()
+  >>> manager.addHeader('Authorization', 'Basic mgr:mgrpw')
+  >>> skinURL = 'http://localhost/++skin++PageletTestSkin'
+  >>> manager.open(skinURL + '/container_contents.html')
+
+The view displays the types of the content objects inside the root
+folder. The content objects are security proxied:
+
+  >>> print manager.contents
+  [<type 'zope.security._proxy._Proxy'>]
\ No newline at end of file


Property changes on: z3c.layer.pagelet/trunk/src/z3c/layer/pagelet/tests/bugfixes.txt
___________________________________________________________________
Added: svn:keywords
   + Id Rev Date
Added: svn:eol-style
   + native



More information about the Checkins mailing list