28 Jun
2003
28 Jun
'03
6:13 p.m.
Jeffrey Hood wrote at 2003-6-27 16:46 -0400:
...
What type of object is "record"? What type is "record[i]"? Either one seems to be an instance without security declarations.
getRecords() returns: {u'item': [['1', 'Fido', '5.00'], ['2', 'Spot', '10.00'], ['4', 'Sparky', '24'], ['9', 'Buffy', '10'], ['10', 'Bobby', '50']]}
(BTW, I'm a beginner with Python/Zope, so forgive me if I don't get the terminology correct...)
This looks harmless, although in Python instances may look like primitive data types. The easiest way to analyse any authorization problem is to install Shane's VerboseSecurity product. It should tell you precisely where the problem occurs. Dieter