megrok.kss broken with new grok security policy

Bug #309567 reported by Uli Fouquet
2
Affects Status Importance Assigned to Milestone
grok
Fix Released
Low
Uli Fouquet

Bug Description

megrok.kss fails with ForbiddenAttribute when following the example on

  http://grok.zope.org/documentation/how-to/adding-ajax-with-kss-to-grok/

if one of the security patched versions of Grok is working in background. This also enourages users to use unsafe versions of Grok and should be fixed.

The problem occurs, because megrok.kss.KSS is a view class not derived from grok.View. It could be fixed easily with upcoming releases of Grok where the Grok publisher would also check for IGrokSecurityView, but this is currently not available and megrok.kss should also work with current security-patched versions like grok 0.14.1.

Uli Fouquet (uli-gnufix)
Changed in grok:
assignee: nobody → uli-gnufix
importance: Undecided → Low
status: New → In Progress
Uli Fouquet (uli-gnufix)
Changed in grok:
status: In Progress → Fix Committed
Uli Fouquet (uli-gnufix)
Changed in grok:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.