[ZPatterns] BetterLocalRolesMixin in LoginManager

Steve Alexander steve@cat-box.net
Tue, 25 Sep 2001 19:45:46 +0100


Tim McLaughlin wrote:

 > Anybody know why this mixin is necessary for LoginManager?  I'm willing
 > to bet that it isn't necessary anymore, because when I took it out, it
 > fixed some acquisitional security issues that I was having (too
 > complicated to explain :)
 >
 > Any thoughts?  Did I do something that is going to create security
 > holes, etc?


I took it out in my personal version of LoginManager.

This was introduced inot LoginManager to make computable local roles.

The same feature was later put into Zope, using slightly different means.

--
Steve Alexander
Software Engineer
Cat-Box limited