Zope 2

security-policy-implementation broken (by DBTab?)

Bug #142658 reported by Stuart Bishop
2
Affects Status Importance Assigned to Milestone
Zope 2
Fix Released
Medium
Unassigned

Bug Description

PermissionRole.py is being imported before the zope.conf is loaded, causing the 'C' security implementation to always be used. It looks like this was caused by Startup/datatypes.py importing DBTab.py (which imports Globals, which eventually imports PermissionRole.py)

Tags: bug zope
Revision history for this message
Stuart Bishop (stub) wrote :

I think this is also breaking some debug mode checks (like auto refresh), as
Globals.DevelopmentMode is being set incorrectly.

Revision history for this message
Chris McDonough (chrism-plope) wrote :

Must fix... thanks.

FYI: The developmentmode bug is fixed (it was due to a similar problem but otherwise unrelated).

Revision history for this message
Hanno Schlichting (hannosch) wrote :

I can confirm from years of experience that setting the security policy to "python" does indeed work.

Changed in zope2:
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.