Issue 1602983
Created on 2006-11-26 02:41 by stefan, last changed 2006-12-13 23:24 by richard.
|
| msg2356 |
Author: [hidden] (stefan) |
Date: 2006-11-26 02:41 |
|
HTMLClass.__getitem__ eventually instantiates a
HTMLProperty with nodeid set to ''. (We are looking
at a class, not an instance.)
HTMLProperty.is_view_ok() then will call
security.hasPermission(), which explicitely checks
for 'nodeid is None' before calling the user-provided
'check'.
It therefor seems as if the HTMLProperty should be
instantiated with nodeid set to None, not '',
or the security checking functions may blow up.
|
| msg2357 |
Author: [hidden] (richard) |
Date: 2006-12-13 23:24 |
|
Seems like a good change.
|
|
| Date |
User |
Action |
Args |
| 2006-11-26 02:41:48 | stefan | create | |
|