[ZCM] [ZC] 1061/ 2 Reject "Permission.setRole() accepts non-string roles"

Collector: Zope Bugs, Features, and Patches ... zope-coders-admin at zope.org
Tue Oct 21 11:16:38 EDT 2003


Issue #1061 Update (Reject) "Permission.setRole() accepts non-string roles"
 Status Rejected, Zope/bug medium
To followup, visit:
  http://collector.zope.org/Zope/1061

==============================================================
= Reject - Entry #2 by Brian on Oct 21, 2003 11:16 am

 Status: Pending => Rejected

This comes with the territory to some extent with using 
a dynamically-typed language - if you look deeply you'll find 
_lots_ of places where correct typing of arguments is not 
enforced.

While it might be helpful to do strict checking in this case 
to uncover the error earlier, the same argument could be made 
for literally hundreds of methods in Zope (and any other Python 
program, for that matter).

-BL
________________________________________
= Request - Entry #1 by Anonymous User on Sep 24, 2003 5:57 am

RoleManager.manage_role accepts being invoked with a non-string role (list, tuple, etc.), and Permission.setRole will create that role without checking. this can cause problems of inconsistance within roles.
==============================================================




More information about the Zope-Collector-Monitor mailing list