[FLOW3-general] ContentSecurity with collections

[Ferdinand Kuhl]

Hi list,
another problem with content security :(

If you use rules like:
this.collection.subProperty = current.securityContext.party

everything works fine on the query level.

But if you try to fetch (for modification or show) such an object the 
PersistenceQueryRewritingAspect does not allow those objects.

Function checkSingleConstraintDefinitionOnResultObject fails to 
resolve the "this.collection.subProperty" and thus denies access to 
the object.

I tracked the problem down to 
Reflection\ObjectAccess:getInternalProperty where such resolving fails 
in first place. But modifying it to return those requests as array 
does not help either, because the rule array != scalar later on can 
not work.

Any Ideas or plans on this?

Greetings,
Ferdinand