[Zope] security assertion needed for dictionary?
Doyon, Jean-Francois
jdoyon at NRCan.gc.ca
Mon Jun 18 11:43:00 EDT 2007
Forgetting plone (which I know nothing about), dictionaries definitely
do NOT need security assertions (like lists, strings, integers and all
basic types).
Are you SURE it's a dictionary? Most likely it just LOOKS like one when
represented as a string.
Try:
<div tal:content="python:repr(myFeed)">
To see exactly what it is ... It might be an instance of some object
that has a __str__ that makes it look like a dictionary?
J.F.
-----Original Message-----
From: zope-bounces at zope.org [mailto:zope-bounces at zope.org] On Behalf Of
tomvon
Sent: June 18, 2007 11:36
To: zope at zope.org
Subject: Re: [Zope] security assertion needed for dictionary?
I have the exact same problem and have been unable to find a solution
anywhere. Were you ever able to resolve this?
sfmcfar wrote:
>
> I apologize for cross-posting from the plone newsgroup. but after
> posting this I realized that this was more of a Zope issue than a
> Plone one. I wish I could cut-and-paste (development is on the other
> side of a firewall), so instead I'll be as clear as I can.
>
> Anyway, I have a Plone product that contains a method called
> getFeedSequence() that returns the result (a dictionary) from
> feedparser.parse() (Feedparser is the generic RSS/Atom parser).
>
> In my template, I can do:
>
> <div tal:define="myFeed python:getFeedSequence()">
> <div tal:content="python:myFeed">
>
> And see the string representation of the dictionary with no problem.
> But if I try and access a member of the sequence:
>
> <div tal:define="myFeed python:getFeedSequence()">
> <div tal:content="python:myFeed['feed']['title']">
>
> VerboseSecurity reports "The container has no security assertions.
> Access to None of {[the entire RSS dictionary goes here]} denied."
>
> How can I have permission to access the entire sequence but not a
> portion of it? it appears to me that the sequence is fairly
> straightforward - a few nested dictionaries, but that's it. Does this
> make any sense?
>
>
> Thanks,
>
> Stan
>
--
View this message in context:
http://www.nabble.com/security-assertion-needed-for-dictionary--tf376206
1.html#a11178187
Sent from the Zope - General mailing list archive at Nabble.com.
_______________________________________________
Zope maillist - Zope at zope.org
http://mail.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )
More information about the Zope
mailing list