add test for https://dev.plone.org/ticket/13793
more details
Fix issue where a user could access an unintended object through
acquisition magic. See https://dev.plone.org/ticket/13793.
Merge branch '4.3.x' of github.com:plone/Products.CMFPlone into 4.3.x

Conflicts:
	docs/CHANGES.rst