Santi Camps wrote:
Here you are a test case for that problem. It's a very simple case of what my framework does.
How to proceed:
1) Install the product in a Zope 2.7.3 beta
2) Add an instance of meta type "AccessControl Test"
3) Try http://localhost:8080/AccessControlTest/get_sum_of_values. It works fine (is a method of Test class)
4) Try http://localhost:8080/AccessControlTest/get_product_of_values. It also works fine (is a method of Adapter class)
5) Try http://localhost:8080/AccessControlTest/crashing_test (is a ZPT trying to access previous methods). It crashes !!
*
Error Type: Unauthorized*
*Error Value: The container has no security assertions Access to 'get_sum_of_values' of (Adapter instance at 40ae6ac0) denied.*
Obviously, this is not a reasonable behaviour. If I can access those methods directly from an URL, I should be able to do it from a ZPT.
Doing the same on Zope 2.7.2 works fine.
To make this a useful test case, I need the product which implements the "AccessControl Test" objects. Even better would be able to reproduce the behviour using a minimal "dummy" class.
Tres. -- =============================================================== Tres Seaver [EMAIL PROTECTED] Zope Corporation "Zope Dealers" http://www.zope.com
_______________________________________________
Zope-Dev maillist - [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
** No cross posts or HTML encoding! **
(Related lists - http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope )
