[Zope] pickling error

Chris McDonough chrism@zope.com
Thu, 04 Jul 2002 12:20:55 -0400


FWIW, allowing Zope to unpickle data that it receives remotely is a 
pretty big security risk.  It sounds like you probably know this and 
it's "OK" in your case, but just wanted to send a message to make sure..

> On Wednesday, July 3, 2002, at 05:54 , Terry Hancock wrote:
> 
>> Hi all,
>>
>> I'm hoping this is the last mystery before I
>> release ... :-D
>>
>> For good or ill, I used a variation of the MiniPickle
>> module (see the example on zope.org) to pack python data
>> structures into a cookie.  (I had to add an extra
>> hex-encoding part to make legal cookies).
>>
>> I needed an external python method to do this in the
>> prototype, and I thought it'd be trivial to just attach
>> these as regular python methods in the product.
>>
>> However, when I try to call my "mini_dumps" method,
>> I get a complaint about not being able to pickle
>> an object in an "acquisition wrapper."  A little
>> searching on zope.org suggests this is referring to
>> the internal mechanism that Zope uses to provide
>> acquisition services.
>>
>> But why wouldn't the external method complain about
>> it?  And how can I unwrap this object? (I guess this
>> means getting a direct reference to the object instead
>> of an indirect one, though I'm still foggy on how
>> acquisition works -- it seems pretty magical still).
>>
>> Thanks,
>> Terry
>>
> 
> 
> 
> _______________________________________________
> Zope maillist  -  Zope@zope.org
> http://lists.zope.org/mailman/listinfo/zope
> **   No cross posts or HTML encoding!  **
> (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce
> http://lists.zope.org/mailman/listinfo/zope-dev )

-- 
Chris McDonough                    Zope Corporation
http://www.zope.org             http://www.zope.com
"Killing hundreds of birds with thousands of stones"