Re: [Zope] security assertion needed for dictionary?

2007-06-18 Thread tomvon


I have the exact same problem and have been unable to find a solution
anywhere. Were you ever able to resolve this? 


sfmcfar wrote:
 
 I apologize for cross-posting from the plone newsgroup. but after posting
 this I realized that this was more of a Zope issue than a Plone one.  I
 wish I could cut-and-paste (development is on the other side of a
 firewall), so instead I'll be as clear as I can.  
 
 Anyway, I have a Plone product that contains a method called
 getFeedSequence() that returns the result (a dictionary) from
 feedparser.parse() (Feedparser is the generic RSS/Atom parser).  
 
 In my template, I can do:
 
 div tal:define=myFeed python:getFeedSequence()
   div tal:content=python:myFeed
 
 And see the string representation of the dictionary with no problem.  But
 if
 I try and access a member of the sequence:
 
 div tal:define=myFeed python:getFeedSequence()
   div tal:content=python:myFeed['feed']['title']
 
 VerboseSecurity reports The container has no security assertions.
 Access to None of {[the entire RSS dictionary goes here]} denied.
 
 How can I have permission to access the entire sequence but not a
 portion of it?  it appears to me that the sequence is fairly
 straightforward - a few nested dictionaries, but that's it.  Does this
 make any sense?
 
 
 Thanks,
 
 Stan 
 

-- 
View this message in context: 
http://www.nabble.com/security-assertion-needed-for-dictionary--tf3762061.html#a11178187
Sent from the Zope - General mailing list archive at Nabble.com.

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] RE: security assertion needed for dictionary?

2007-06-18 Thread tomvon


dtml-var repr(newsfd) does the same as dtml-var newsfd. Here's a
snippet of what it shows:

{'feed': {'subtitle': u'', 'links': [{'href':
u'http://www.modscape.com/blog', 'type': 'text/html', 'rel': 'alternate'}],
'title': u'modscape.com Home', 'subtitle_detail': {'base':
'http://www.modscape.com/blog/rss.xml', 'type': 'text/html', 'value': u'',
'language': None}, 'title_detail': {'base':
'http://www.modscape.com/blog/rss.xml', 'type': 'text/plain', 'value':
u'modscape.com Home', 'language': None}, 'link':
u'http://www.modscape.com/blog'}, 'status': 200, 'updated': (2007, 6, 18,
15, 54, 24, 0, 169, 0), 'encoding': 'iso-8859-15', 'bozo': 0, 'href':
'http://www.modscape.com/blog/rss.xml', 'headers': {'content-length':
'18486', 'via': '1.0 px02.bc.fw.cbs.net:80 (squid)', 'x-cache': 'MISS from
px02.bc.fw.cbs.net', 'x-powered-by': 'Zope (www.zope.org), Python
(www.python.org)', 'x-cache-lookup': 'HIT from px02.bc.fw.cbs.net:80',
'expires': 'Mon, 18 Jun 2007 16:54:24 GMT', 'server': 'Apache/2.0.52 (Red
Hat) DAV/2 SVN/1.2.3 mod_ssl/2.0.52 OpenSSL/0.9.7a PHP/5.1.2
mod_fastcgi/2.4.2', 'last-modified': 'Mon, 18 Jun 2007 15:54:24 GMT',
'connection': 'close', 'cache-control': 'max-age=3600', 'date': 'Mon, 18 Jun
2007 15:54:24 GMT', 'content-type': 'text/xml; charset=iso-8859-15'},
'version': 'rss20', 'etag': None, 'namespaces': {}, 'entries': [{'updated':
u'Mon, Sep 04 2006, 06:23PM', 'updated_parsed': None, 'links': [{'href':
u'http://www.modscape.com/blog/index_html?showall=yes#id1157412223', 'type':
'text/html', 'rel': 'alternate'}], 'title': u'Ubuntu: Linux For Human
Beings', 'summary_detail': {'base': 'http://www.modscape.com/blog/rss.xml',
'type': 'text/html', 'value': u'ubuntu.jpg\n\nTom wrote:


Doyon, Jean-Francois-2 wrote:
 
 Forgetting plone (which I know nothing about), dictionaries definitely
 do NOT need security assertions (like lists, strings, integers and all
 basic types).
 
 Are you SURE it's a dictionary?  Most likely it just LOOKS like one when
 represented as a string.
 
 Try:
 
 div tal:content=python:repr(myFeed)
 
 To see exactly what it is ... It might be an instance of some object
 that has a __str__ that makes it look like a dictionary?
 
 J.F.
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 tomvon
 Sent: June 18, 2007 11:36
 To: zope@zope.org
 Subject: Re: [Zope] security assertion needed for dictionary?
 
 
 
 I have the exact same problem and have been unable to find a solution
 anywhere. Were you ever able to resolve this? 
 
 
 sfmcfar wrote:
 
 I apologize for cross-posting from the plone newsgroup. but after 
 posting this I realized that this was more of a Zope issue than a 
 Plone one.  I wish I could cut-and-paste (development is on the other 
 side of a firewall), so instead I'll be as clear as I can.
 
 Anyway, I have a Plone product that contains a method called
 getFeedSequence() that returns the result (a dictionary) from
 feedparser.parse() (Feedparser is the generic RSS/Atom parser).  
 
 In my template, I can do:
 
 div tal:define=myFeed python:getFeedSequence()
   div tal:content=python:myFeed
 
 And see the string representation of the dictionary with no problem.  
 But if I try and access a member of the sequence:
 
 div tal:define=myFeed python:getFeedSequence()
   div tal:content=python:myFeed['feed']['title']
 
 VerboseSecurity reports The container has no security assertions.
 Access to None of {[the entire RSS dictionary goes here]} denied.
 
 How can I have permission to access the entire sequence but not a 
 portion of it?  it appears to me that the sequence is fairly 
 straightforward - a few nested dictionaries, but that's it.  Does this
 
 make any sense?
 
 
 Thanks,
 
 Stan
 
 
 -- 
 View this message in context:
 http://www.nabble.com/security-assertion-needed-for-dictionary--tf376206
 1.html#a11178187
 Sent from the Zope - General mailing list archive at Nabble.com.
 
 ___
 Zope maillist  -  Zope@zope.org
 http://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists - 
  http://mail.zope.org/mailman/listinfo/zope-announce
  http://mail.zope.org/mailman/listinfo/zope-dev )
 ___
 Zope maillist  -  Zope@zope.org
 http://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
  http://mail.zope.org/mailman/listinfo/zope-announce
  http://mail.zope.org/mailman/listinfo/zope-dev )
 
 

-- 
View this message in context: 
http://www.nabble.com/security-assertion-needed-for-dictionary--tf3762061.html#a11178584
Sent from the Zope - General mailing list archive at Nabble.com.

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope