#2207: identity.SecureObject doesn't cascade down to subcontrollers
------------------------+---------------------------------------------------
Reporter: fetchinson | Owner: faide
Type: defect | Status: closed
Priority: highest | Milestone: 1.1
Component: TurboGears | Version: 1.0.8
Severity: major | Resolution: fixed
Keywords: security |
------------------------+---------------------------------------------------
Changes (by Chris Arndt):
* status: new => closed
* resolution: => fixed
Comment:
Turns out, this is solely a problem in !CatWalk! The !CatWalk sub-
controller `Browse` does not use `controllers.Conntroller` as a base class
and so `SecureObject` does not wrap access to it in another `SecureObject`
instance. See [source:/branches/1.1/turbogears/identity/conditions.py#L339
identity.conditions.py, line 339].
This is fixed in r6643 for all 1.x branches.
--
Ticket URL: <http://trac.turbogears.org/ticket/2207#comment:5>
TurboGears <http://www.turbogears.org/>
TurboGears front-to-back web development
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google
Groups "TurboGears Tickets" group.
This group is read-only. No posting by normal members allowed.
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/turbogears-tickets?hl=en?hl=en
-~----------~----~----~----~------~----~------~--~---
