diff -r a2d2383612f3 -r 08c5d26417f6 server/repository.py
--- a/server/repository.py	Mon Jul 20 16:43:47 2015 +0200
+++ b/server/repository.py	Mon Jul 20 12:37:47 2015 +0200
@@ -712,6 +712,8 @@
         """
         with Session(InternalManager(), self) as session:
             with session.new_cnx() as cnx:
+                cnx.user._cw = cnx  # XXX remove when "vreg = user._cw.vreg"
+                                    # hack in entity.py is gone
                 with cnx.security_enabled(read=False, write=False):
                     yield cnx