AccessControl 7.1__tar.gz → 7.2__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (90) hide show
  1. {accesscontrol-7.1 → accesscontrol-7.2}/CHANGES.rst +7 -0
  2. {accesscontrol-7.1 → accesscontrol-7.2}/PKG-INFO +8 -1
  3. {accesscontrol-7.1 → accesscontrol-7.2}/setup.py +1 -1
  4. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/userfolder.py +1 -0
  5. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl.egg-info/PKG-INFO +8 -1
  6. {accesscontrol-7.1 → accesscontrol-7.2}/.manylinux-install.sh +0 -0
  7. {accesscontrol-7.1 → accesscontrol-7.2}/.manylinux.sh +0 -0
  8. {accesscontrol-7.1 → accesscontrol-7.2}/.pre-commit-config.yaml +0 -0
  9. {accesscontrol-7.1 → accesscontrol-7.2}/CONTRIBUTING.md +0 -0
  10. {accesscontrol-7.1 → accesscontrol-7.2}/COPYRIGHT.txt +0 -0
  11. {accesscontrol-7.1 → accesscontrol-7.2}/HISTORY.rst +0 -0
  12. {accesscontrol-7.1 → accesscontrol-7.2}/LICENSE.txt +0 -0
  13. {accesscontrol-7.1 → accesscontrol-7.2}/MANIFEST.in +0 -0
  14. {accesscontrol-7.1 → accesscontrol-7.2}/README.rst +0 -0
  15. {accesscontrol-7.1 → accesscontrol-7.2}/buildout.cfg +0 -0
  16. {accesscontrol-7.1 → accesscontrol-7.2}/docs/AccessControl.rst +0 -0
  17. {accesscontrol-7.1 → accesscontrol-7.2}/docs/requestmethod.rst +0 -0
  18. {accesscontrol-7.1 → accesscontrol-7.2}/include/Acquisition/Acquisition.h +0 -0
  19. {accesscontrol-7.1 → accesscontrol-7.2}/include/ExtensionClass/ExtensionClass.h +0 -0
  20. {accesscontrol-7.1 → accesscontrol-7.2}/include/ExtensionClass/_compat.h +0 -0
  21. {accesscontrol-7.1 → accesscontrol-7.2}/pyproject.toml +0 -0
  22. {accesscontrol-7.1 → accesscontrol-7.2}/setup.cfg +0 -0
  23. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/AuthEncoding.py +0 -0
  24. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/ImplC.py +0 -0
  25. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/ImplPython.py +0 -0
  26. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/Implementation.py +0 -0
  27. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/Owned.py +0 -0
  28. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/Permission.py +0 -0
  29. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/PermissionMapping.py +0 -0
  30. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/PermissionRole.py +0 -0
  31. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/Permissions.py +0 -0
  32. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/Role.py +0 -0
  33. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/SecurityInfo.py +0 -0
  34. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/SecurityManagement.py +0 -0
  35. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/SecurityManager.py +0 -0
  36. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/SimpleObjectPolicies.py +0 -0
  37. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/SpecialUsers.py +0 -0
  38. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/User.py +0 -0
  39. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/ZopeGuards.py +0 -0
  40. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/ZopeSecurityPolicy.py +0 -0
  41. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/__init__.py +0 -0
  42. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/_compat.h +0 -0
  43. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/cAccessControl.c +0 -0
  44. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/class_init.py +0 -0
  45. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/configure.zcml +0 -0
  46. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/interfaces.py +0 -0
  47. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/logger_wrapper.py +0 -0
  48. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/meta.zcml +0 -0
  49. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/metaconfigure.py +0 -0
  50. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/owner.py +0 -0
  51. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/permissions.zcml +0 -0
  52. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/requestmethod.py +0 -0
  53. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/rolemanager.py +0 -0
  54. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/safe_formatter.py +0 -0
  55. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/security.py +0 -0
  56. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tainted.py +0 -0
  57. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/__init__.py +0 -0
  58. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/actual_python.py +0 -0
  59. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/mixed_module/__init__.py +0 -0
  60. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/mixed_module/submodule/__init__.py +0 -0
  61. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/private_module/__init__.py +0 -0
  62. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/private_module/submodule/__init__.py +0 -0
  63. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/public_module/__init__.py +0 -0
  64. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/public_module/submodule/__init__.py +0 -0
  65. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/testClassSecurityInfo.py +0 -0
  66. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/testImplementation.py +0 -0
  67. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/testModuleSecurity.py +0 -0
  68. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/testPermissionMapping.py +0 -0
  69. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/testPermissionRole.py +0 -0
  70. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/testSecurityManager.py +0 -0
  71. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/testZCML.py +0 -0
  72. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/testZopeGuards.py +0 -0
  73. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/testZopeSecurityPolicy.py +0 -0
  74. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/test_owner.py +0 -0
  75. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/test_requestmethod.py +0 -0
  76. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/test_rolemanager.py +0 -0
  77. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/test_safe_formatter.py +0 -0
  78. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/test_safeiter.py +0 -0
  79. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/test_tainted.py +0 -0
  80. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/test_userfolder.py +0 -0
  81. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/tests/test_users.py +0 -0
  82. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/unauthorized.py +0 -0
  83. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/users.py +0 -0
  84. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl.egg-info/SOURCES.txt +0 -0
  85. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl.egg-info/dependency_links.txt +0 -0
  86. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl.egg-info/entry_points.txt +0 -0
  87. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl.egg-info/not-zip-safe +0 -0
  88. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl.egg-info/requires.txt +0 -0
  89. {accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl.egg-info/top_level.txt +0 -0
  90. {accesscontrol-7.1 → accesscontrol-7.2}/tox.ini +0 -0
{accesscontrol-7.1 → accesscontrol-7.2}/CHANGES.rst RENAMED
@@ -3,6 +3,13 @@ Changelog
3
3
 
4
4
  For changes before version 3.0, see ``HISTORY.rst``.
5
5
 
6
+ 7.2 (2024-11-03)
7
+ ----------------
8
+
9
+ - Prevent untrusted access to ``AccessControl.userfolder.UserFolder.data``
10
+ (fixes `GHSA-g5vw-3h65-2q3v <https://github.com/zopefoundation/AccessControl/security/advisories/GHSA-g5vw-3h65-2q3v>`_).
11
+
12
+
6
13
  7.1 (2024-10-10)
7
14
  ----------------
8
15
 
{accesscontrol-7.1 → accesscontrol-7.2}/PKG-INFO RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.1
2
2
  Name: AccessControl
3
- Version: 7.1
3
+ Version: 7.2
4
4
  Summary: Security framework for Zope.
5
5
  Home-page: https://github.com/zopefoundation/AccessControl
6
6
  Author: Zope Foundation and Contributors
@@ -73,6 +73,13 @@ Changelog
73
73
 
74
74
  For changes before version 3.0, see ``HISTORY.rst``.
75
75
 
76
+ 7.2 (2024-11-03)
77
+ ----------------
78
+
79
+ - Prevent untrusted access to ``AccessControl.userfolder.UserFolder.data``
80
+ (fixes `GHSA-g5vw-3h65-2q3v <https://github.com/zopefoundation/AccessControl/security/advisories/GHSA-g5vw-3h65-2q3v>`_).
81
+
82
+
76
83
  7.1 (2024-10-10)
77
84
  ----------------
78
85
 
{accesscontrol-7.1 → accesscontrol-7.2}/setup.py RENAMED
@@ -32,7 +32,7 @@ ext_modules = [
32
32
  join('include', 'Acquisition', 'Acquisition.h')]),
33
33
  ]
34
34
 
35
- version = '7.1'
35
+ version = '7.2'
36
36
 
37
37
 
38
38
  setup(name='AccessControl',
{accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl/userfolder.py RENAMED
@@ -376,6 +376,7 @@ class UserFolder(BasicUserFolder):
376
376
  zmi_show_add_dialog = False
377
377
  id = 'acl_users'
378
378
  title = 'User Folder'
379
+ data__roles__ = () # prevent untrusted access to ``data``.
379
380
 
380
381
  def __init__(self):
381
382
  self.data = PersistentMapping()
{accesscontrol-7.1 → accesscontrol-7.2}/src/AccessControl.egg-info/PKG-INFO RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.1
2
2
  Name: AccessControl
3
- Version: 7.1
3
+ Version: 7.2
4
4
  Summary: Security framework for Zope.
5
5
  Home-page: https://github.com/zopefoundation/AccessControl
6
6
  Author: Zope Foundation and Contributors
@@ -73,6 +73,13 @@ Changelog
73
73
 
74
74
  For changes before version 3.0, see ``HISTORY.rst``.
75
75
 
76
+ 7.2 (2024-11-03)
77
+ ----------------
78
+
79
+ - Prevent untrusted access to ``AccessControl.userfolder.UserFolder.data``
80
+ (fixes `GHSA-g5vw-3h65-2q3v <https://github.com/zopefoundation/AccessControl/security/advisories/GHSA-g5vw-3h65-2q3v>`_).
81
+
82
+
76
83
  7.1 (2024-10-10)
77
84
  ----------------
78
85
 
{accesscontrol-7.1 → accesscontrol-7.2}/.manylinux.sh RENAMED
File without changes
{accesscontrol-7.1 → accesscontrol-7.2}/CONTRIBUTING.md RENAMED
File without changes
{accesscontrol-7.1 → accesscontrol-7.2}/COPYRIGHT.txt RENAMED
File without changes
{accesscontrol-7.1 → accesscontrol-7.2}/HISTORY.rst RENAMED
File without changes
{accesscontrol-7.1 → accesscontrol-7.2}/LICENSE.txt RENAMED
File without changes
{accesscontrol-7.1 → accesscontrol-7.2}/MANIFEST.in RENAMED
File without changes
{accesscontrol-7.1 → accesscontrol-7.2}/README.rst RENAMED
File without changes
{accesscontrol-7.1 → accesscontrol-7.2}/buildout.cfg RENAMED
File without changes
{accesscontrol-7.1 → accesscontrol-7.2}/pyproject.toml RENAMED
File without changes
{accesscontrol-7.1 → accesscontrol-7.2}/setup.cfg RENAMED
File without changes
{accesscontrol-7.1 → accesscontrol-7.2}/tox.ini RENAMED
File without changes