"Chris McDonough" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Saturday, February 24, 2001 3:18 PM
Subject: Re: [Zope-dev] ZCatalog madness. (Must log in as emergencyuser.)
> On Sat, 24 Feb 2001, Chris McDonough wrote:
>
> > I can't replicate this behav
On Sat, 24 Feb 2001, Chris McDonough wrote:
> I can't replicate this behavior with normal objects. :-(
Riiight...
*thinking very hard*
I just realized how it all started. Me and a collegue was indexing
objects, searching, doing regular development (probably changing classes,
attributes etc
I can't replicate this behavior with normal objects. :-(
- Original Message -
From: "Erik Enge" <[EMAIL PROTECTED]>
To: "Chris McDonough" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Saturday, February 24, 2001 4:58 AM
Subject: Re: [
On Fri, 23 Feb 2001, Erik Enge wrote:
> Feedback and debug information coming your way as soon as possible :)
Ok, I index DTML Methods, Python objects, and all different kind of
things. Then I did a search, meta_type set to 'DTML Method' and it gave
me an unauthorized. Strangeness.
I've insta
On Fri, 23 Feb 2001, Chris McDonough wrote:
> I meant to narrow down the problem domain in cases where you do call
> getobject... cases where you aren't calling getobject are not relevant.
Ok. I see.
> It would be helpful to find out for which objects getobject fails and for
> which it succee
> > And any access to getobject with any data_record_id_ returns
unauthorized
> > for any user besides emergency user?
>
> Hm... No, not entirely correct. If I don't get any hits, I don't get the
> unauthorized, but that is probably because I don't even try the
> getobject. The point I'm making
On Fri, 23 Feb 2001, Chris McDonough wrote:
> And any access to getobject with any data_record_id_ returns unauthorized
> for any user besides emergency user?
Hm... No, not entirely correct. If I don't get any hits, I don't get the
unauthorized, but that is probably because I don't even try th
EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Friday, February 23, 2001 2:01 PM
Subject: Re: [Zope-dev] ZCatalog madness. (Must log in as emergencyuser.)
> On Fri, 23 Feb 2001, Chris McDonough wrote:
>
> > different python classes. Do they inherit from a common base class?
On Fri, 23 Feb 2001, Chris McDonough wrote:
> different python classes. Do they inherit from a common base class?
Yes. A homemade one.
> Did you make these objects or are they from another Product or are
> they standard Zope objects (like DTML methods, etc.)?
It's a mix. Most of them I cre
On Fri, 23 Feb 2001, Chris McDonough wrote:
> > It happens with all kinds of objects I have in my index. All my objects
> > in the index are from Python-based products.
>
> Are they all of one type?
The same type (as in, they are all Python based), but with different
meta_types.
> Can you re
is McDonough" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Friday, February 23, 2001 1:55 PM
Subject: Re: [Zope-dev] ZCatalog madness. (Must log in as emergencyuser.)
> On Fri, 23 Feb 2001, Chris McDonough wrote:
>
> > > It happens with all kinds of objects I have in
>
> "No" to which question?
No to the question "And is there a way to actuall give access to
restrictedTraverse (or, probably more corretly, to let it traverse)?"
> > what are you getobjecting? Does it happen only with certain kinds of
> > objects? Are they ZClass objects or Product-based obje
On Fri, 23 Feb 2001, Chris McDonough wrote:
> No...
"No" to which question?
> what are you getobjecting? Does it happen only with certain kinds of
> objects? Are they ZClass objects or Product-based objects?
It happens with all kinds of objects I have in my index. All my objects
in the inde
OTECTED]>
Sent: Friday, February 23, 2001 9:23 AM
Subject: Re: [Zope-dev] ZCatalog madness. (Must log in as emergencyuser.)
> On Thu, 22 Feb 2001, Chris McDonough wrote:
>
> > I'm not sure why this isn't in 2.3.1b1, but yes, the code in getobject
was
> > chang
On Thu, 22 Feb 2001, Chris McDonough wrote:
> I'm not sure why this isn't in 2.3.1b1, but yes, the code in getobject was
> changed to use unrestrictedTraverse for this very reason.
On closer inspection, I can see that it is actually changed in
2.3.1b1. It does say unrestrictedTraverse (line 457
;[EMAIL PROTECTED]>
Sent: Thursday, February 22, 2001 12:38 PM
Subject: Re: [Zope-dev] ZCatalog madness. (Must log in as emergencyuser.)
> Chris McDonough wrote:
>
> > I'm not sure why this isn't in 2.3.1b1, but yes, the code in getobject
was
> > changed to use unres
Chris McDonough wrote:
> I'm not sure why this isn't in 2.3.1b1, but yes, the code in getobject was
> changed to use unrestrictedTraverse for this very reason.
Does that open up a security hole?
Can I get to an object via the getobject method of ZCatalog that I can't get to
otherwise?
I thoug
: Thursday, February 22, 2001 10:33 AM
Subject: [Zope-dev] ZCatalog madness. (Must log in as emergencyuser.)
> Right.
>
> This is the traceback I get, after doing a search (searchResults) - which
> goes fine by teh way - and then trying to do an
> getobject(x.data_record_id_) as a n
Right.
This is the traceback I get, after doing a search (searchResults) - which
goes fine by teh way - and then trying to do an
getobject(x.data_record_id_) as a non-emergencyuser user get up an login
box and press escape:
Unauthorized
Sorry, a Zope error occurred.
Traceback (innermost last):
19 matches
Mail list logo
