[Zope-Checkins] CVS: Zope/doc - CHANGES.txt:1.406.2.72

Shane Hathaway shane@cvs.zope.org
Wed, 18 Sep 2002 11:51:53 -0400


Update of /cvs-repository/Zope/doc
In directory cvs.zope.org:/tmp/cvs-serv28903/doc

Modified Files:
      Tag: Zope-2_5-branch
	CHANGES.txt 
Log Message:
Merge from head, adding a note to CHANGES.txt.

Finished fix for collector #558.  restrictedTraverse() was not providing
adequate context for the security manager, resulting in excessive Unauthorized
errors.  The previous fix corrected traversal using __bobo_traverse__();
this fix corrects traversal using getattr().  The problem was solved by
simply making use of AccessControl.ZopeGuards.guarded_getattr().


=== Zope/doc/CHANGES.txt 1.406.2.71 => 1.406.2.72 ===
--- Zope/doc/CHANGES.txt:1.406.2.71	Fri Sep 13 06:06:44 2002
+++ Zope/doc/CHANGES.txt	Wed Sep 18 11:51:53 2002
@@ -75,6 +75,10 @@
 
       - BTrees fixes backported from the Zope 2.6 branch
 
+      - Collector #558: restrictedTraverse() sometimes raised Unauthorized
+        errors when it shouldn't, because it wasn't providing enough context
+        to the security manager.  Now the context is provided.
+
   Zope 2.5.1
 
     New Features