[Zope] Difference between getItem and restrictedTraverse

Dieter Maurer dieter@handshake.de
Fri, 30 Nov 2001 22:25:21 +0100


Sven Hohage writes:
 > When I switch <dtml-with "_.getitem(obj)"> with <dtml-with
 > "restrictedTraverse(obj,None)">
 > Zope accepts the VIP-Role and shows the frame.
I have seen this, too:

   "restrictedTraverse" seems to be less strictly checking permissions
   the DTML access.

   This may be a bug, but I have been happy about this.
   It allowed me to access the property sheets of a ZClass
   (the class itself, not its instances).


Dieter