Use restrictedTraverse which will perform security checks rather than getattr which will raise Unauthorized if logged in user can't access portal_gadgets.

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@24658 20353a03-c40f-0410-a6d1-a30d3c3de9de