RE: [Zope] upgrade to 2.2 and zsql methods problems

[Brian Lloyd]

> I have the exact same problem.
> 
> Júlio
> 

Hi guys - 

For those of you (I've mostly heard ODBC adapter users) 
having authorization problems with your SQL methods, heres
the scoop:

Database connections use one of two classes in the 
framework for wrapping up result data returned from 
queries. One of those classes (that understands results 
in RDB format) was missing a required security assertion. 

The results returned by the ODBC adapter were bitten by 
this - probably there are other adapters that could 
be affected.

I've attached a patch file for the file:
lib/python/Shared/DC/ZRDB/RDB.py

...as well as an updated version of the whole file (since 
I know a lot of you will be on Windows w/o patch :) Either 
patch or replace the file and restart Zope to fix the 
problem.

This is also checked in for a 2.2.1 release that will 
probably happen after a few weeks when enough people 
have upgraded to shake out any other problems.




Brian Lloyd[EMAIL PROTECTED]
Software Engineer  540.371.6909  
Digital Creations  http://www.digicool.com 


 RDB.py
 RDB.py.patch

Re: [Zope] upgrade to 2.2 and zsql methods problems

[Júlio Dinis Silva]

I have the exact same problem.

Júlio


>From: "Erik Myllymaki" <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>Subject: [Zope] upgrade to 2.2 and zsql methods problems
>Date: Sun, 16 Jul 2000 22:34:28 -0700
>
>Hello,
>
>I just upgraded to 2.2 from 2.1.6 on a WinNT machine. Things went well,
>except my zsql methods won't run from the site. I can manage and test them
>from the management pages, but if I call them from the site I get an
>*unauthorized* error. This happens even wen I log in as superuser or the
>owner of that zsqlmethod object. I have tried to recreate some of the
>queries from scratch and applying new ownership and wide open permissions,
>but this doesn't seem to work either.
>
>Zope is running as a service and I am using the ODBC adapter to connect to
>MSSQL Server. As I say, the queries all un as expected from the management
>test screens.
>
>Any ideas?
>
>Thanks,
>
>Erik Myllymaki
>[EMAIL PROTECTED]
>
>
>___
>Zope maillist  -  [EMAIL PROTECTED]
>http://lists.zope.org/mailman/listinfo/zope
>**   No cross posts or HTML encoding!  **
>(Related lists -
>  http://lists.zope.org/mailman/listinfo/zope-announce
>  http://lists.zope.org/mailman/listinfo/zope-dev )
>


Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )