collective.explicitacquisition 2.0

Disallow access to acquired content outside the current path.

collective.explicitacquisition

Access to acquired content in CMF/ Plone should not be allowed.

This package disables content acquisition.

Installation

Add the package to your buildout’s instances eggs section. Once the ZCML is loaded by Zope it is active. No further steps needed.

Source Code

The sources are in a GIT DVCS with its main branches at github.

We’d be happy to see many forks and pull-requests to make collective.explicitacquisition even better.

Contributors

This package is a repackaging of Godfroid Chapelle’s (gotcha) Products.CMFPlone branch “publication through explicit acquisition”_, which solves ticket 13793 (references old, archived bug tracker).

Further contributors:

• Johannes Raggam (thetet)

• Kim Paulissen (spereverde

• Maik Derstappen (MrTango)

• Jens Klein (jensens)

Changelog

2.0 (2021-02-05)

• Update package (black, isort, structure) [jensens]

• Drop support of Python 2.7, [jensens]

• Support Python 3 on Plone 5.2.x+ [spereverde]

1.1 (2015-02-18)

• Add MANIFEST.in and fix release. [thet]

1.0 (2015-02-17)

• Fix issue where a user could access an unintended object through acquisition magic. See https://dev.plone.org/ticket/13793. [gotcha]