2 files changed, 8 insertions, 11 deletions

diff --git a/src/mailman/rest/configuration.py b/src/mailman/rest/configuration.py
index 30bc184fe..19ad6a09d 100644
--- a/src/mailman/rest/configuration.py
+++ b/src/mailman/rest/configuration.py
@@ -63,13 +63,13 @@ class AdminWebServiceConfiguration:
     default_batch_size = 50
     max_batch_size = 300
 
-    # XXX What's this for?
-    def createRequest(self, body_instream, environ):
-        """See `IWebServiceConfiguration`."""
-        request = AdminWebServiceRequest(body_instream, environ)
-        request.setPublication(
-            AdminWebServicePublication(AdminWebServiceRootResource()))
-        return request
+    ## # XXX What's this for?
+    ## def createRequest(self, body_instream, environ):
+    ##     """See `IWebServiceConfiguration`."""
+    ##     request = AdminWebServiceRequest(body_instream, environ)
+    ##     request.setPublication(
+    ##         AdminWebServicePublication(AdminWebServiceRootResource()))
+    ##     return request
 
     def get_request_user(self):
         """See `IWebServiceConfiguration`."""
diff --git a/src/mailman/rest/publication.py b/src/mailman/rest/publication.py
index 1f3fa74b5..2334fb602 100644
--- a/src/mailman/rest/publication.py
+++ b/src/mailman/rest/publication.py
@@ -72,10 +72,7 @@ class Publication:
 
     def callObject(self, request, ob):
         """See `IPublication`."""
-        # XXX Bad hack.
-        from zope.security.proxy import removeSecurityProxy
-        ob = removeSecurityProxy(ob)
-        return mapply(ob, request.getPositionalArguments(), request)
+        return ob()
 
     def afterCall(self, request, ob):
         """See `IPublication`."""