[ZCM] [ZC] 1460/ 5 Resolve "guarded_apply too restrictive
(HEAD/2.8)"
Collector: Zope Bugs, Features,
and Patches ...
zope-coders-admin at zope.org
Fri Apr 1 10:18:39 EST 2005
Issue #1460 Update (Resolve) "guarded_apply too restrictive (HEAD/2.8)"
Status Resolved, Zope/bug medium
To followup, visit:
http://www.zope.org/Collectors/Zope/1460
==============================================================
= Resolve - Entry #5 by tseaver on Apr 1, 2005 10:18 am
Status: Accepted => Resolved
This should already be fixed in subversion, as of revision 29712:
http://svn.zope.org/Zope/?rev=29712&sortby=date&view=rev
________________________________________
= Comment - Entry #4 by yuppie on Apr 1, 2005 5:26 am
While it 'seems' to work fine with ZopeGuards.py from the Zope-2_7-branch, digging deeper I found related changes from the same day (04/01/16):
http://cvs.zope.org/query?branch=Zope-2_7-branch&who=jim&sortby=date&date=all#results
So merging these changes into HEAD might be more complicated than I thought in the first place.
________________________________________
= Comment - Entry #3 by yuppie on Oct 29, 2004 7:53 am
Maybe Jim can have a quick look at this?
He fixed the same issue on the Zope-2_7-branch:
http://cvs.zope.org/Zope/lib/python/AccessControl/Attic/ZopeGuards.py.diff?r1=1.16.2.2&r2=1.16.2.3
But these changes were never merged into HEAD. Don't know why.
I tested Zope 2.8 with the latest version of ZopeGuards.py from the Zope-2_7-branch and everything seems to work fine.
________________________________________
= Accept - Entry #2 by ajung on Oct 5, 2004 11:43 pm
Status: Pending => Accepted
Supporters added: ajung
We should fix this for 2.8 a1
________________________________________
= Request - Entry #1 by yuppie on Aug 9, 2004 3:53 am
This test script raises Unauthorized if a kw value is not a string or tuple:
def foo(text):
return text
kw = {'text':'baz'}
print foo(**kw)
kw = {'text':True}
print foo(**kw)
return printed
Traceback (innermost last):
...
- Line 8
Module AccessControl.ZopeGuards, line 356, in guarded_apply
Module AccessControl.ZopeGuards, line 376, in builtin_guarded_apply
Module AccessControl.ZopeGuards, line 226, in guard
Unauthorized: You are not allowed to access 'text' in this context
==============================================================
More information about the Zope-Collector-Monitor
mailing list