[Zope] access problem/security issue

Maik Jablonski maik.jablonski@uni-bielefeld.de
06 Jun 2002 09:06:36 +0200


another one could be missing doc-strings... but that's just a
guess...;-)

-mj

On Thu, 2002-06-06 at 08:20, Robert Rottermann wrote:
> Hi there,
> I have a security issue I am not able to solve.
> 
> In a product I define a class:
> 
> class PersonRecord (persistentRedPMBase):
>     #security = ClassSecurityInfo()
>     is_group = 0
>     is_type = PERSONTYPE
>     firstname = ''
>     lastname=''
> 
>     uniqueid = None
>     def __getitem__(self, key):
>         return self.__dict__[key]
> 
>     def getUniqueId ( self ) :
>         return uniqueid
> 
>     def setFirstname(self, firstname):
>         self.firstname = firstname
> 
> 
>     def getFirstname(self):
>         return firstname
> 
> I can create and store and retrieve such records. However when I try to access one
> of its datamebers I get an access error
> You are not allowed to access setFirstname in this context
> 
> What is my mistake ??
> 
> Thanks for your tips
> Robert