At Thu, 21 Nov 2002 12:16:09 +, Chris Withers wrote:
I'm trying to get stripogram working from Script(Pythons). I thought I had it,
but it appears I don't.
I added the following in the __init__.py of the stripogram package:
try:
from AccessControl import ModuleSecurityInfo,allow_module
except ImportError:
# no Zope around
raise
else:
allow_module('stripogram')
ModuleSecurityInfo('stripogram').declareObjectPublic()
ModuleSecurityInfo('stripogram').declarePublic('html2text', 'html2safehtml')
This issue is most probably resolved somewhere in between, but I can
not find any trace of this at [EMAIL PROTECTED] nor [EMAIL PROTECTED], thus I
drop in my 2 cents here.
I did just now run into a similar problem, and may offer the following
explanation after some debugging:
It seems the 'allow_module', etc, gets not executed by Zope in advance,
except if this is the __init__.py of a 'Product', or this module is
imported by some core module or product. This is quite standard python
behaviour; the module is not initialized before import, and Zope does
some extra work to initialize all products on startup.
If one tries to import the code from a python script, the security
machinery first check, if the module has some security info, and imports
it afterwards, if the info is found. But as the module is not imported
anyway, it is not initialized, and has not such info and thus will not
be allowed for import.
It seems there is some chicken and egg problem here, or I have missed
something completely.
The workaround is to insert a dummy 'import stripogram' in some
product, which triggers the security info creation -- or make the little
helper scripts a product of its own.
I don't think either the allow_module or the declareObjectPublic() should be
necessary. However, the declareObjectPublic at least made this test pass:
from Products.PythonScripts.PythonScript import PythonScript
theScript = PythonScript('test')
theScript.ZBindings_edit({})
theScript.write(from stripogram import html2text\nreturn
html2text('ihello/i'))
theScript._makeFunction()
self.assertEqual(theScript(),'hello')
This works, as Your test code imports something via file system (no
access restriction) from module stripogram first and then creates the
test script, which finds the module info on import as the module is
intialized yet.
But even adding the 'allow_module' won't let the following Script (Python)
created through the ZMI work:
from stripogram import html2text
The error I get is:
Error Type: ImportError
Error Value: import of stripogram is unauthorized
In this case the module has not been initialized yet, and the TTW
access is the first import, which failes due to the security
restrictions problem mentioned above.
Hope this helps; and hope someone can point me out I am wrong on the
chicken and egg problem of 'non-Product' module import.
Cheers,
Clemens
___
Zope-Dev maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope )
