[ZCM] [ZC] 2333/ 1 Request "Five.browser.metaconfigure.page doesn't protect names from interface superclasses"

Issue #2333 Update (Request) "Five.browser.metaconfigure.page doesn't protect names from interface superclasses"
 Status Pending, Zope/bug+solution medium
To followup, visit:
  http://www.zope.org/Collectors/Zope/2333

==============================================================
= Request - Entry #1 by tuppence on Jun 9, 2007 10:39 am


Uploaded:  "allowed_interface_security.diff"
 - http://www.zope.org/Collectors/Zope/2333/allowed_interface_security.diff/view
Subject line says it all.  The bug stems from the security setup code calling <interface>.names() rather than <interface>.names(all=True).  philiKON asserts it's a bug.

I'm attaching a patch to fix and a test that I hope exercises the bug.  I say "hope" because I've been unable to run (just) the Five tests on my Windows platform.  Hopefully this is enough for it to be easy for someone to fix this.
==============================================================