A small note on security assertions
If you are like me and don't like to start coding from scratch, but rather like to start modifying an existing and proven source skeleton, like the Boring product for example, one small piece of advice: watch out for conflicting declarations. It took me over one month (give or take) to find out why all my security assertions (such as 'security.declareObjectPublic()' and such) were totally ineffective: because I left '__ac_permissions__' skeleton code hanging. Once that was commented out, all worked finally as advertized. Still, a month of wasted search, running like a headless chicken through sources and docs. Painful and frustrating. I hope this little note might save someone similar frustration. Because Zope is really, really great. Cheers, Vio
Hi Vio, It might help if you were to add a comment to this effect to the Zope Developer's Guide on Zope.org. See Documentation -> Zope Developer's Guide -> Chapter 6 (Security). Thanks! vio wrote:
If you are like me and don't like to start coding from scratch, but rather like to start modifying an existing and proven source skeleton, like the Boring product for example, one small piece of advice: watch out for conflicting declarations.
It took me over one month (give or take) to find out why all my security assertions (such as 'security.declareObjectPublic()' and such) were totally ineffective: because I left '__ac_permissions__' skeleton code hanging. Once that was commented out, all worked finally as advertized. Still, a month of wasted search, running like a headless chicken through sources and docs. Painful and frustrating. I hope this little note might save someone similar frustration. Because Zope is really, really great.
Cheers, Vio
fS(^^(TM)¨¥-+-fS(^ÎS(^¢¸!¶Ú?þX¬¶Ìè¥ê+fùs(S(Ys(Y"ùb²Ø§~?ó¢--?¡Êè²Êh²Û(¬tÌ-éܡا?¥j×?-+-²m§ÿåS(ËlÎS(^¢¸?^(TM)¨¥^(TM)©ÿ-+-S(wèÿ:)y©ç¢éÜzm§ÿåS(ËlÎS(^¢¸?^(TM)¨¥^(TM)©ÿ-+-S(wèÿ:)yׯ
participants (2)
-
Chris McDonough -
vio