[Zope3-dev] Re: security frustrations

Martijn Faassen faassen at infrae.com
Tue Aug 9 13:05:58 EDT 2005


Florent Guillaume wrote:
> Does it work to just set __parent__ to the container? Or does the 
> zopesecuritypolicy require more accurate context?

I think that might work, though I've had previous problems with actually 
being allowed to *set* the __parent__ to the container. :)

I would also be worried about code that checks whether an object has a 
previous parent and sends a different event (move). Given that, it's 
easier to just removeSecurityProxy on the code..

Regards,

Martijn


More information about the Zope3-dev mailing list