Tom,
Because display of objects is application specific, we dispatch the display of the object to the URL specificed by a Tcl proc that belongs to that package.
There may be some issue with permissions, but it is not quite what you think. The object redirect package would just redirect to a package specific URL which could do the permissions checking. In the category package, there might be a need to limit listings of certain objects. This is also the case for the search package which also accesses a service contract to display an objects URL.
So this object display page will not display a list of objects, or the object's contents. All it does is redirect to the appropriate URL. Nothing is displayed out of context.
