Right now, a custom displayer's code is executed with the rights of the calling document instead of being executed with the rights of the document where it is defined (class document or custom displayer document).
There are currently 3 locations where a custom displayer can come from:
- class document
- xwiki document with a name respecting a convention
- filesystem template with a name respecting a convention
For the first 2 cases (at least), the context "sdoc" key should be set accordingly when rendering the custom displayer's code.