-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Tue, 25 Jan 2005 10:30 am, Stefan H. Holek wrote:
- declaring object security on the acquiree via
declareObjectProtected(foo)
For me, the problem arises when the acquiree is a Python builtin object - a
string instance attribute in my case.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Mon, 7 Feb 2005 05:26 pm, Richard Jones wrote:
That is, there's no acquisition context on the simple string. To fix the
problem, I changed secure_url to be a ComputedAttribute which looked up the
instance attribute _secure_url. This then gave
The failing AccessControl tests can now be found on shh-aqtests-branch
in zope.org CVS.
Observations:
a) guarded_getattr checks object security of the acquiree if the
container denies access (at least that's my assessment).
b) The tests pass when either
- running Zope 2.7.3, or
-
