Subject: New releases? - msg#00127
List: web.zope.plone.archetypes.devel
Was this page helpful?
Thread at a glance:
Previous Message by Date:
click to view message preview
Re: [Security] Security declaration for "ClassGen" generated methods ineffective
Christian Heimes wrote:
This was in AT 1.2 but what about the new code in AT 1.3? See
http://cvs.sourceforge.net/viewcvs.py/archetypes/Archetypes/ClassGen.py?rev=1.18.4.3&only_with_tag=release-1_3-branch&view=auto
>>> o.Contributors
<bound method ATDynDocument.Contributors of <ATDynDocument at
/testsite/atdyndoc>>
>>> o.Contributors.func_name
'Contributors'
>>> o.Contributors__roles__
['Anonymous', 'Manager', 'Reviewer', 'Manager', 'Anonymous']
Looks good although the double entries of Manager and Anonymous seem to
be strange. :)
Christian
-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
Next Message by Date:
click to view message preview
Re: New releases?
Sidnei da Silva wrote:
What about making a new release of at 1.2 and at 1.3 today?
1.2:
There is already a 1.2.5-rc5 for testing on sf.net. The only change to
rc4 is the fix from Dieter.
1.3:
No we have to wait until the migration from 1.3a to 1.3b3 is finished.
Christian
-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
Previous Message by Thread:
click to view message preview
[Security] Security declaration for "ClassGen" generated methods ineffective
An extensive test suite for an AT base custom product revealed that
security declarations for "ClassGen" generated methods are ineffective.
The reason:
Zope security requires all security protected methods to have a function
name.
It uses this name to determine which roles are allowed to access the
method.
"ClassGen" uses lamdba's for the generated methods.
The name of a "lambda" function is "<lambda>" -- and not
the name used in the security declaration.
Fix:
Add in "ClassGen.Generator.makeMethod" before
"setattr(klass, methodName, method)"
from new import function
method = function(method.func_code,
method.func_globals,
methodName,
method.func_defaults,
method.func_closure,
)
--
Dieter
-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
Next Message by Thread:
click to view message preview
Re: New releases?
Sidnei da Silva wrote:
What about making a new release of at 1.2 and at 1.3 today?
1.2:
There is already a 1.2.5-rc5 for testing on sf.net. The only change to
rc4 is the fix from Dieter.
1.3:
No we have to wait until the migration from 1.3a to 1.3b3 is finished.
Christian
-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click