Security framework for Zope.

Navigation

Verified details

These details have been verified by PyPI
Owner
organization icon Zope Foundation
Maintainers
Avatar for hannosch from gravatar.com hannosch Avatar for icemac from gravatar.com icemac Avatar for tseaver from gravatar.com tseaver Avatar for wichert from gravatar.com wichert Avatar for zope.wheelbuilder from gravatar.com zope.wheelbuilder

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: Zope Public License (ZPL 2.1)
  • Author: Zope Foundation and Contributors
  • Tags security, access, authorization
  • Requires: Python >=3.8
  • Provides-Extra: test
Classifiers

Project description

https://github.com/zopefoundation/AccessControl/actions/workflows/tests.yml/badge.svg https://coveralls.io/repos/github/zopefoundation/AccessControl/badge.svg?branch=master Current version on PyPI Supported Python versions

AccessControl

AccessControl provides a general security framework for use in Zope.

Changelog

For changes before version 3.0, see HISTORY.rst.

7.2 (2024-11-03)

  • Prevent untrusted access to AccessControl.userfolder.UserFolder.data (fixes GHSA-g5vw-3h65-2q3v).

7.1 (2024-10-10)

  • Add final support for Python 3.13.

  • Respect PURE_PYTHON environment variable set to 0 when running tests.

  • Let the roles access in rolesForPermissionOn interpret AttributeError and Unauthorized as “no roles definition for this permission at this object” and report any other exception (for the Python and C implementation). We have to treat Unauthorized like AttributeError to support Shared.DC.Scripts.Bindings.UnauthorizedBinding which raises Unauthorized for any access.

7.0 (2024-05-30)

  • Add preliminary support for Python 3.13 as of 3.13b1.

  • Remove support for Python 3.7.

  • Build Windows wheels on GHA.

  • Make dict views (.keys(), .items() and .values()) behave like their unrestricted versions. (#147)

  • Make .items() validate each keys and values, like .keys() and .values() do.

  • Fix build errors on recent macOS versions.

6.3 (2023-11-20)

  • Add support for Python 3.12.

6.2 (2023-09-04)

  • Fix information disclosure through str.format_map. (CVE-2023-41050)

6.1 (2023-05-22)

  • Update C header files for ExtensionClass and Acquisition from the original packages where needed. (#140)

  • Add preliminary support for Python 3.12a5.

6.0 (2023-01-12)

  • Build Linux binary wheels for Python 3.11

  • Drop support for Python 2.7, 3.5, 3.6.

5.7 (2022-11-17)

  • Add support for building arm64 wheels on macOS.

5.6 (2022-11-03)

  • Add support for final Python 3.11 release.

5.5 (2022-10-10)

  • Switch from -Ofast to -O3 when compiling code for Linux wheels. (#133)

  • Add support for Python 3.11 (as of 3.11.0rc2).

5.4 (2022-08-26)

  • Add support for Python 3.11 (as of 3.11.0b5).

  • Support default argument in next built-in function. (#131)

5.3.1 (2022-03-29)

  • Prevent race condition in guarded_import (#123)

5.3 (2022-02-25)

  • Provide AccessControl.get_safe_globals to facilitate safe use.

  • Honor PURE_PYTHON environment variable to enable python implementation during runtime.

  • Add support for Python 3.10.

5.2 (2021-07-30)

  • Fix Appveyor configuration so tests can run and wheels build.

5.1 (2021-07-30)

NOTE: This release has been yanked from PyPI due to wheel build issues.

  • Fix a remote code execution issue by preventing access to string.Formatter from restricted code.

5.0 (2020-10-07)

  • Add support for Python 3.9.

  • Remove deprecated classes and functions in (see #32):

    • AccessControl/DTML.py

    • AccessControl/Owned.py

    • AccessControl/Role.py

    • AccessControl/Permissions.py

  • Add deprecation warnings for BBB imports in:

    • AccessControl/AuthEncoding.py

    • AccessControl/Owned.py

    • AccessControl/Role.py

    • AccessControl/User.py

  • Although this version might run on Zope 4, it is no longer supported because of the dropped deprecation warnings.

4.2 (2020-04-20)

  • Add missing permission Manage WebDAV Locks

  • Fix regression for BBB import of `users.UnrestrictedUser (#94)

  • Add a check if database is present in .owner.ownerInfo. (#91).

4.1 (2019-09-02)

  • Python 3: Allow iteration over the result of dict.{keys,values,items} (#89).

4.0 (2019-05-08)

Changes since 3.0.12:

  • Add support for Python 3.5, 3.6, 3.7 and 3.8.

  • Restore simple access to bytes methods in Python 3 (#83)

  • Clarify deprecation warnings for several BBB shims. (#32)

  • Add a test to prove that a user folder flag cannot be acquired elsewhere. (#7)

  • Tighten basic auth string handling in BasicUserFolder.identify (#56)

  • Prevent the Zope 4 ZMI from showing an add dialog for the user folder. (#82)

  • Fix order of roles returned by AccessControl.rolemanager.RoleManager.userdefined_roles.

  • Add configuration for zodbupdate.

  • Add TaintedBytes besides TaintedString in AccessControl.tainted. (#57)

  • Security fix: In str.format, check the security for attributes that are accessed. (Ported from 2.13).

  • Port override_container context manager here from 2.13.

  • Add AppVeyor configuration to automate building Windows eggs.

  • Fix for compilers that only support C89 syntax (e.g. on Windows).

  • Sanitize and test RoleManager role handling.

  • Depend on RestrictedPython >= 4.0.

  • #16: Fixed permission handling by avoiding column and row numbers as identifiers for permissions and roles.

  • Extract .AuthEncoding to its own package for reuse.

  • Declare missing dependency on BTrees.

  • Drop Record dependency, which now does its own security declaration.

  • Remove leftovers from history support dropped in Zope.

  • Remove duplicate guard against * imports. (#60)

3.0.12 (2015-12-21)

3.0.11 (2014-11-02)

  • Harden test fix for machines that do not define localhost.

3.0.10 (2014-11-02)

  • Test fix for machines that do not define localhost.

3.0.9 (2014-08-08)

  • GitHub #6: Do not pass SecurityInfo instance itself to declarePublic/declarePrivate when using the public/private decorator. This fixes Conflicting security declarations warnings on Zope startup.

  • LP #1248529: Leave existing security manager in place inside RoleManager.manage_getUserRolesAndPermissions.

3.0.8 (2013-07-16)

  • LP #1169923: ensure initialization of shared ImplPython state (used by ImplC) when using the “C” security policy. Thanks to Arnaud Fontaine for the patch.

3.0.7 (2013-05-14)

  • Remove long-deprecated ‘Shared’ roles support (pre-dates Zope, never used by Zope itself)

  • Prevent infinite loop when looking up local roles in an acquisition chain with cycles.

3.0.6 (2012-10-31)

  • LP #1071067: Use a stronger random number generator and a constant time comparison function.

3.0.5 (2012-10-21)

  • LP #966101: Recognize special zope2.Private permission in ZCML role directive.

3.0.4 (2012-09-09)

  • LP #1047318: Tighten import restrictions for restricted code.

3.0.3 (2012-08-23)

  • Fix a bug in ZopeSecurityPolicy.py. Global variable rolesForPermissionOn could be overridden if __role__ had custom rolesForPermissionOn.

3.0.2 (2012-06-22)

  • Add Anonymous as a default role for Public permission.

3.0.1 (2012-05-24)

  • Fix tests under Python 2.6.

3.0 (2012-05-12)

  • Added decorators for public, private and protected security declarations.

  • Update tests to take advantage of automatic test suite discovery.

Project details

Verified details

These details have been verified by PyPI
Owner
organization icon Zope Foundation
Maintainers
Avatar for hannosch from gravatar.com hannosch Avatar for icemac from gravatar.com icemac Avatar for tseaver from gravatar.com tseaver Avatar for wichert from gravatar.com wichert Avatar for zope.wheelbuilder from gravatar.com zope.wheelbuilder

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: Zope Public License (ZPL 2.1)
  • Author: Zope Foundation and Contributors
  • Tags security, access, authorization
  • Requires: Python >=3.8
  • Provides-Extra: test
Classifiers

Release history Release notifications | RSS feed

This version

7.2

7.1

7.0

6.3

6.2

6.1

6.0

5.7

5.6

5.5

5.4

5.3.1

5.3

5.2

5.1 yanked

Reason this release was yanked:

Missing wheels

5.0

4.4

4.3

4.2

4.1

4.0

4.0b7 pre-release

4.0b6 pre-release

4.0b5 pre-release

4.0b4 pre-release

4.0b3 pre-release

4.0b2 pre-release

4.0b1 pre-release

4.0a7 pre-release

4.0a6 pre-release

4.0a5 pre-release

4.0a4 pre-release

4.0a3 pre-release

4.0a2 pre-release

4.0a1 pre-release

3.0.14

3.0.13

3.0.12

3.0.11

3.0.10

3.0.9

3.0.8

3.0.7

3.0.6

3.0.5

3.0.4

3.0.3

3.0.2

3.0.1

3.0

2.13.16

2.13.15

2.13.14

2.13.13

2.13.12

2.13.11

2.13.10

2.13.9

2.13.8

2.13.7

2.13.6

2.13.5

2.13.4

2.13.3

2.13.2

2.13.1

2.13.0

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

accesscontrol-7.2.tar.gz (114.4 kB view hashes)

Uploaded Source

Built Distributions

AccessControl-7.2-cp313-cp313-win_amd64.whl (144.3 kB view hashes)

Uploaded CPython 3.13 Windows x86-64

AccessControl-7.2-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl (201.0 kB view hashes)

Uploaded CPython 3.13 manylinux: glibc 2.17+ ARM64

AccessControl-7.2-cp313-cp313-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl (202.1 kB view hashes)

Uploaded CPython 3.13 manylinux: glibc 2.17+ x86-64 manylinux: glibc 2.5+ x86-64

AccessControl-7.2-cp313-cp313-manylinux_2_5_i686.manylinux1_i686.manylinux_2_17_i686.manylinux2014_i686.whl (196.7 kB view hashes)

Uploaded CPython 3.13 manylinux: glibc 2.17+ i686 manylinux: glibc 2.5+ i686

AccessControl-7.2-cp313-cp313-macosx_11_0_arm64.whl (141.9 kB view hashes)

Uploaded CPython 3.13 macOS 11.0+ ARM64

AccessControl-7.2-cp313-cp313-macosx_10_9_x86_64.whl (141.8 kB view hashes)

Uploaded CPython 3.13 macOS 10.9+ x86-64

AccessControl-7.2-cp312-cp312-win_amd64.whl (144.3 kB view hashes)

Uploaded CPython 3.12 Windows x86-64

AccessControl-7.2-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl (201.0 kB view hashes)

Uploaded CPython 3.12 manylinux: glibc 2.17+ ARM64

AccessControl-7.2-cp312-cp312-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl (202.1 kB view hashes)

Uploaded CPython 3.12 manylinux: glibc 2.17+ x86-64 manylinux: glibc 2.5+ x86-64

AccessControl-7.2-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.manylinux_2_17_i686.manylinux2014_i686.whl (196.8 kB view hashes)

Uploaded CPython 3.12 manylinux: glibc 2.17+ i686 manylinux: glibc 2.5+ i686

AccessControl-7.2-cp312-cp312-macosx_11_0_arm64.whl (142.0 kB view hashes)

Uploaded CPython 3.12 macOS 11.0+ ARM64

AccessControl-7.2-cp312-cp312-macosx_10_9_x86_64.whl (141.8 kB view hashes)

Uploaded CPython 3.12 macOS 10.9+ x86-64

AccessControl-7.2-cp311-cp311-win_amd64.whl (144.0 kB view hashes)

Uploaded CPython 3.11 Windows x86-64

AccessControl-7.2-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl (195.7 kB view hashes)

Uploaded CPython 3.11 manylinux: glibc 2.17+ ARM64

AccessControl-7.2-cp311-cp311-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl (195.5 kB view hashes)

Uploaded CPython 3.11 manylinux: glibc 2.17+ x86-64 manylinux: glibc 2.5+ x86-64

AccessControl-7.2-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.manylinux_2_17_i686.manylinux2014_i686.whl (191.8 kB view hashes)

Uploaded CPython 3.11 manylinux: glibc 2.17+ i686 manylinux: glibc 2.5+ i686

AccessControl-7.2-cp311-cp311-macosx_11_0_arm64.whl (141.5 kB view hashes)

Uploaded CPython 3.11 macOS 11.0+ ARM64

AccessControl-7.2-cp311-cp311-macosx_10_9_x86_64.whl (141.3 kB view hashes)

Uploaded CPython 3.11 macOS 10.9+ x86-64

AccessControl-7.2-cp310-cp310-win_amd64.whl (144.0 kB view hashes)

Uploaded CPython 3.10 Windows x86-64

AccessControl-7.2-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl (192.2 kB view hashes)

Uploaded CPython 3.10 manylinux: glibc 2.17+ ARM64

AccessControl-7.2-cp310-cp310-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl (192.2 kB view hashes)

Uploaded CPython 3.10 manylinux: glibc 2.17+ x86-64 manylinux: glibc 2.5+ x86-64

AccessControl-7.2-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.manylinux_2_17_i686.manylinux2014_i686.whl (188.6 kB view hashes)

Uploaded CPython 3.10 manylinux: glibc 2.17+ i686 manylinux: glibc 2.5+ i686

AccessControl-7.2-cp310-cp310-macosx_11_0_arm64.whl (141.6 kB view hashes)

Uploaded CPython 3.10 macOS 11.0+ ARM64

AccessControl-7.2-cp310-cp310-macosx_10_9_x86_64.whl (141.3 kB view hashes)

Uploaded CPython 3.10 macOS 10.9+ x86-64

AccessControl-7.2-cp39-cp39-win_amd64.whl (144.0 kB view hashes)

Uploaded CPython 3.9 Windows x86-64

AccessControl-7.2-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl (192.1 kB view hashes)

Uploaded CPython 3.9 manylinux: glibc 2.17+ ARM64

AccessControl-7.2-cp39-cp39-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl (192.0 kB view hashes)

Uploaded CPython 3.9 manylinux: glibc 2.17+ x86-64 manylinux: glibc 2.5+ x86-64

AccessControl-7.2-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.manylinux_2_17_i686.manylinux2014_i686.whl (188.4 kB view hashes)

Uploaded CPython 3.9 manylinux: glibc 2.17+ i686 manylinux: glibc 2.5+ i686

AccessControl-7.2-cp39-cp39-macosx_11_0_arm64.whl (141.5 kB view hashes)

Uploaded CPython 3.9 macOS 11.0+ ARM64

AccessControl-7.2-cp39-cp39-macosx_10_9_x86_64.whl (141.2 kB view hashes)

Uploaded CPython 3.9 macOS 10.9+ x86-64

AccessControl-7.2-cp38-cp38-win_amd64.whl (144.0 kB view hashes)

Uploaded CPython 3.8 Windows x86-64

AccessControl-7.2-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl (195.7 kB view hashes)

Uploaded CPython 3.8 manylinux: glibc 2.17+ ARM64

AccessControl-7.2-cp38-cp38-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl (195.6 kB view hashes)

Uploaded CPython 3.8 manylinux: glibc 2.17+ x86-64 manylinux: glibc 2.5+ x86-64

AccessControl-7.2-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.manylinux_2_17_i686.manylinux2014_i686.whl (191.9 kB view hashes)

Uploaded CPython 3.8 manylinux: glibc 2.17+ i686 manylinux: glibc 2.5+ i686

AccessControl-7.2-cp38-cp38-macosx_11_0_arm64.whl (141.6 kB view hashes)

Uploaded CPython 3.8 macOS 11.0+ ARM64

AccessControl-7.2-cp38-cp38-macosx_10_9_x86_64.whl (141.3 kB view hashes)

Uploaded CPython 3.8 macOS 10.9+ x86-64

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page