[Zope] security assertion needed for dictionary?

Doyon, Jean-Francois jdoyon at NRCan.gc.ca
Mon Jun 18 11:43:00 EDT 2007


Forgetting plone (which I know nothing about), dictionaries definitely
do NOT need security assertions (like lists, strings, integers and all
basic types).

Are you SURE it's a dictionary?  Most likely it just LOOKS like one when
represented as a string.

Try:

<div tal:content="python:repr(myFeed)">

To see exactly what it is ... It might be an instance of some object
that has a __str__ that makes it look like a dictionary?

J.F.

-----Original Message-----
From: zope-bounces at zope.org [mailto:zope-bounces at zope.org] On Behalf Of
tomvon
Sent: June 18, 2007 11:36
To: zope at zope.org
Subject: Re: [Zope] security assertion needed for dictionary?



I have the exact same problem and have been unable to find a solution
anywhere. Were you ever able to resolve this? 


sfmcfar wrote:
> 
> I apologize for cross-posting from the plone newsgroup. but after 
> posting this I realized that this was more of a Zope issue than a 
> Plone one.  I wish I could cut-and-paste (development is on the other 
> side of a firewall), so instead I'll be as clear as I can.
> 
> Anyway, I have a Plone product that contains a method called
> getFeedSequence() that returns the result (a dictionary) from
> feedparser.parse() (Feedparser is the generic RSS/Atom parser).  
> 
> In my template, I can do:
> 
> <div tal:define="myFeed python:getFeedSequence()">
>   <div tal:content="python:myFeed">
> 
> And see the string representation of the dictionary with no problem.  
> But if I try and access a member of the sequence:
> 
> <div tal:define="myFeed python:getFeedSequence()">
>   <div tal:content="python:myFeed['feed']['title']">
> 
> VerboseSecurity reports "The container has no security assertions.
> Access to None of {[the entire RSS dictionary goes here]} denied."
> 
> How can I have permission to access the entire sequence but not a 
> portion of it?  it appears to me that the sequence is fairly 
> straightforward - a few nested dictionaries, but that's it.  Does this

> make any sense?
> 
> 
> Thanks,
> 
> Stan
> 

-- 
View this message in context:
http://www.nabble.com/security-assertion-needed-for-dictionary--tf376206
1.html#a11178187
Sent from the Zope - General mailing list archive at Nabble.com.

_______________________________________________
Zope maillist  -  Zope at zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


More information about the Zope mailing list