[Zope-Checkins] CVS: Packages/AccessControl - ZopeGuards.py:

Chris McDonough chrism@zope.com
Wed, 8 Aug 2001 13:49:55 -0400

Update of /cvs-repository/Packages/AccessControl
In directory cvs.zope.org:/tmp/cvs-serv27951

Modified Files:
      Tag: Zope-2_4-branch
Log Message:
Fixed spot in guarded_getitem which inappropriately short-circuited some securit
y checks (also fixes Collector 2483), thanks to Matt Behrens.

=== Packages/AccessControl/ZopeGuards.py => ===
         return v
     v = object[index]
-    if Containers(type(object)):
+    if Containers(type(object)) and Containers(type(v)):
         # Simple type.  Short circuit.
         return v
     if getSecurityManager().validate(object, object, index, v):