Revert r25177, which allows user without any security uid to view all objects.

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@25179 20353a03-c40f-0410-a6d1-a30d3c3de9de

product/ERP5Catalog/CatalogTool.py

@@ -596,10 +596,7 @@ class CatalogTool (UniqueObject, ZCatalog, CMFCoreCatalogTool, ActiveObject):
         if security_uid_list:
           query = ComplexQuery(Query(security_uid=security_uid_list, operator='IN'),
                                query, operator='OR')
-      elif security_uid_list:
-        # If security_uid_list is empty, adding it to criterions will only
-        # result in "false or [...]", so avoid useless overhead by not
-        # adding it at all.
+      else:
         query = Query(security_uid=security_uid_list, operator='IN')
 
       if local_role_column_dict: