Serializing to Catalog the deny permissions and return the complete URL

src/plone.server/plone/server/catalog/catalog.py

@@ -13,7 +13,7 @@
 from zope.schema import getFields
 from zope.securitypolicy.principalpermission import principalPermissionManager
 from zope.securitypolicy.rolepermission import rolePermissionManager
-from zope.securitypolicy.settings import Allow
+from zope.securitypolicy.settings import Allow, Deny
 
 
 globalPrincipalPermissionSetting = principalPermissionManager.getSetting
@@ -125,6 +125,8 @@ def __call__(self):
             'uuid': self.content.uuid,
             'accessRoles': [x for x in roles if roles[x] == Allow],
             'accessUsers': [x for x in users if users[x] == Allow],
+            'denyedRoles': [x for x in roles if roles[x] == Deny],
+            'denyedUsers': [x for x in users if users[x] == Deny],
             'path': path,
             'portal_type': self.content.portal_type
         })

src/plone.server/plone/server/json/serialize_content.py

@@ -1,14 +1,12 @@
 # -*- coding: utf-8 -*-
 from plone.server.interfaces import IContainer
 from plone.server.interfaces import IResource
-from plone.server.content import iterSchemata
 from plone.server.json.interfaces import IResourceFieldSerializer
 from plone.server.json.interfaces import IResourceSerializeToJson
 from plone.server.json.interfaces import IResourceSerializeToJsonSummary
 from plone.server.interfaces import IAbsoluteURL
 from plone.server.content import getCachedFactory
 from plone.server.json.serialize_value import json_compatible
-from plone.server.browser import get_physical_path
 from plone.server.interfaces import READ_PERMISSIONS_KEY
 from plone.server.directives import mergedTaggedValueDict
 from zope.component import adapter
@@ -47,7 +45,7 @@ def __call__(self):
             parent_summary = {}
 
         result = {
-            '@id': '/'.join(get_physical_path(self.context)),
+            '@id': IAbsoluteURL(self.context, self.request)(),
             'id': self.context.id,
             '@type': self.context.portal_type,
             'parent': parent_summary,