Disallow access to acquired content outside the current path.
Project description
collective.explicitacquisition
Access to acquired content in CMF/ Plone should not be allowed.
This package disables content acquisition.
Installation
Add the package to your buildout’s instances eggs section. Once the ZCML is loaded by Zope it is active. No further steps needed.
Source Code
The sources are in a GIT DVCS with its main branches at github.
We’d be happy to see many forks and pull-requests to make collective.explicitacquisition even better.
Contributors
This package is a repackaging of Godfroid Chapelle’s (gotcha) Products.CMFPlone branch “publication through explicit acquisition”_, which solves ticket 13793 (references old, archived bug tracker).
Further contributors:
Johannes Raggam (thetet)
Kim Paulissen (spereverde
Maik Derstappen (MrTango)
Jens Klein (jensens)
Changelog
2.0 (2021-02-05)
Update package (black, isort, structure) [jensens]
Drop support of Python 2.7, [jensens]
Support Python 3 on Plone 5.2.x+ [spereverde]
1.1 (2015-02-18)
Add MANIFEST.in and fix release. [thet]
1.0 (2015-02-17)
Fix issue where a user could access an unintended object through acquisition magic. See https://dev.plone.org/ticket/13793. [gotcha]
