[Zope3-dev] Security Proxies

[Roché Compaan]

I am busy moving a rather big app to Zope3 and my battle with security
proxies is becoming a bit of show stopper. "setattr" on security proxies
don't remove proxies around "value" which causes the ZODB to complain
"Cannot pickle <type 'zope.security._proxy._Proxy'> objects". This
occurs at a point when the security.checker's check_setattr has already
passed without exceptions.

It is easily reproducable as well - just declare an interface with an
"Object" schema field, with add- and editform and implement it.

Now it doesn't seem right that schema fields should remove proxies
before calling setattr since a security check is done during "setattr".
Hence my conclusion that this looks like a bug. If it is and I am not
missing something obvious I'll file it in the collector.

-- 
Roché Compaan
Upfront Systems                 http://www.upfrontsystems.co.za