infinite loop iterating over context_processors.PermWrapper

[Uz]

The template code below will cause an infinite memory-eating loop if context_processors.auth is enabled. My main issue with that is that it was incredibly hard to debug for me, when I passed my own 'perms' queryset to a template. So here's a (temporary) patch, to make it at least immediately fail.

{% for perm in perms %}
{% endfor %}

[Uz]

permwrapper.patch only adds this to the PermWrapper class:

    def __iter__(self):
        raise NotImplementedError
}}

[Collin Grady]

possible alternative?

    def __iter__(self):
        for p in self.user.get_all_permissions():
            yield p

[Benjamin Schwarze]

Added improved patch, which makes use of cgrady's idea.

The use of self.user.get_all_permissions() raised another problem -- this method doesn't exist for AnonymousUser. So I added the missing methods from User to the AnonymousUser class, providing adequate return values or raising NotImplementedError.

Updated docs for AnonymousUser as well.

[Jacob]

(In [8263]) No, really: PermWrapper is not iterable. Fixes #8182.

[Jacob]

Milestone 1.0 beta deleted