[Zope3-dev] security and adapters

Garrett Smith garrett at mojave-corp.com
Mon Oct 6 15:02:05 EDT 2003

Previous message: [Zope3-dev] menu items and layers
Next message: [Zope3-dev] security and adapters
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

zapi.getAdapter is returning non-security-proxied objects, which can be 
used to bypass security for an object.

Shouldn't adapters be proxied?

  -- Garrett

Previous message: [Zope3-dev] menu items and layers
Next message: [Zope3-dev] security and adapters
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

More information about the Zope3-dev mailing list