plone/plone.api — Issue #2: checkConstraints
Author: zupo
Created: 2012-02-27 12:43:37+00:00
State: open

Quoting davisagli: "One thing I've found very useful in the Dexterity version is the checkConstraints=False flag if I want to add a content item and ignore the normal security checks for whether the item is allowed (useful for example in a browser view intended to let anonymous users submit something)."

I like the idea, but what are the security implications (if any) that we need to consider here? Is it safe to just go do it? How difficult will it be to make Archetypes ignore all constraints?