Security update

lib/python/AccessControl/Role.py

 """Access control support"""
 
-__version__='$Revision: 1.8 $'[11:-2]
+__version__='$Revision: 1.9 $'[11:-2]
 
 
 from Globals import HTMLFile, MessageDialog
@@ -330,51 +330,11 @@ class RoleManager:
 	return self._mainAccess(self, REQUEST)
 
 
+    # Compatibility names only!!
 
-
-    smallRolesWidget=''
-
-
-
-
+    smallRolesWidget=selectedRoles=aclAChecked=aclPChecked=aclEChecked=''
     validRoles=valid_roles
     manage_rolesForm=manage_access
-    #manage_rolesForm=HTMLFile('manage_rolesForm', globals())
-    #smallRolesWidget=HTMLFile('smallRolesWidget', globals())
-
-
-    def selectedRoles(self):
-	try:    roles=self.aq_self.__roles__
-	except: roles=[]
-	if roles is None: roles=[]
-	return map(lambda i, r=roles:
-		   i in r and ('<OPTION VALUE="%s" SELECTED>%s' % (i,i)) \
-		   or  ('<OPTION VALUE="%s">%s' % (i,i)), self.validRoles())
-
-    def aclAChecked(self):
-	if hasattr(self,'aq_self'):
-	    self=self.aq_self
-	try:    roles=self.__roles__
-	except: return ' CHECKED'
-	return ''
-
-    def aclPChecked(self):
-	if hasattr(self,'aq_self'):
-	    self=self.aq_self
-	try:    roles=self.__roles__
-	except: return ''
-	if roles is None: 
-	    return ' CHECKED'
-	return ''
-
-    def aclEChecked(self):
-	if hasattr(self,'aq_self'):
-	    self=self.aq_self
-	try:    roles=self.__roles__
-	except: return 0
-	if roles is None: 
-	    return ''
-	return ' CHECKED'
 
     def manage_editRoles(self,REQUEST,acl_type='A',acl_roles=[]):
 	pass

lib/python/AccessControl/User.py

 """Access control package"""
 
-__version__='$Revision: 1.27 $'[11:-2]
+__version__='$Revision: 1.28 $'[11:-2]
 
 
 from PersistentMapping import PersistentMapping
@@ -226,7 +226,7 @@ class UserFolderHandler:
     """ """
     meta_types_=({'name':'User Folder', 'action':'manage_addUserFolder'},)
 
-    def manage_addUserFolder(self,dtself,REQUEST,**ignored):
+    def manage_addUserFolder(self,dtself=None,REQUEST=None,**ignored):
         """ """
 	try:    self._setObject('acl_users', UserFolder())
 	except: return MessageDialog(