-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tue, 25 Jan 2005 10:30 am, Stefan H. Holek wrote: > - declaring object security on the acquiree via > declareObjectProtected(foo)
For me, the problem arises when the acquiree is a Python builtin object - a string instance attribute in my case. Hence I can't make any useful statement like the above. I have a statement:: security.setDefaultAccess({'secure_url': 1}) on the class, but with the change discussed here, that assertion is never looked up. I attempted to:: security.declarePublic('secure_url') but of course that didn't change anything, as I mentioned the class assertions weren't being looked at. After poking around some more, I realised that validate() (VerboseSecurityPolicy's) was being invoked with:: aq_chain(container) = [ <CG Conference Registrations registrations at 0x4176ba00>, <CG WebSpace web at 0x41483ce0>, <CG Conference 1 at 0x4176b970>, <CG Conferences conferences at 0x41483c30>, <CGPublisher CGPublisher at 0x4176b980>, <Application instance at 4179e050>, <RequestContainer instance at 4176b9f0>] context = <AccessControl.SecurityManagement.SecurityContext instance at 0x413cabec> aq_chain(value) = ['http://secure.cgpublisher.localhost'] That is, there's no acquisition context on the simple string. To "fix" the problem, I changed secure_url to be a ComputedAttribute which looked up the instance attribute _secure_url. This then gave the value a valid acquisition chain and everything "works" now. I'm really sorry I can't be more helpful and produce a useful test case, but I've a bazillion deadlines falling on the floor. Maybe in a few months. For now I just needed a work-around that will let me run in an un-patched Zope. Richard -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFCBwoerGisBEHG6TARAqRIAJwOOCtEccg2RqsjqjzlTLkEVfvn2gCeMYRw qwFvrTuk5xxhYi0pAU+UcUo= =SOlC -----END PGP SIGNATURE----- _______________________________________________ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )