From 6bdf133f84b24f45c724a676471b06f82ccb50fe Mon Sep 17 00:00:00 2001
From: Jim Fulton <jim@zope.com>
Date: Tue, 20 Dec 2005 18:58:17 +0000
Subject: [PATCH] Added a security declaration for the handy DirectResult.

---
 http.zcml | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 http.zcml

diff --git a/http.zcml b/http.zcml
new file mode 100644
index 0000000..6209aed
--- /dev/null
+++ b/http.zcml
@@ -0,0 +1,21 @@
+<configure
+   xmlns="http://namespaces.zope.org/zope"
+   package="zope.publisher.http">
+
+  <content class="zope.publisher.http.HTTPRequest">
+    <require
+        permission="zope.View"
+        interface="zope.publisher.interfaces.http.IHTTPApplicationRequest"/>
+  </content>
+
+  <content class="zope.publisher.http.URLGetter">
+    <require
+        permission="zope.View" 
+        attributes="get __getitem__ __str__" />
+  </content>
+
+  <class class="zope.publisher.http.DirectResult">
+    <allow interface="zope.publisher.interfaces.http.IResult" />
+  </class>
+
+</configure>