[Zope-dev] zope-tests - FAILED: 4, OK: 40, UNKNOWN: 2

2011-11-18 Thread Zope tests summarizer
This is the summary for test reports received on the zope-tests list between 2011-11-17 00:00:00 UTC and 2011-11-18 00:00:00 UTC: See the footnotes for test reports of unsuccessful builds. An up-to date view of the builders is also available in our buildbot documentation:

[Zope] Python Script Security

2011-11-18 Thread Richard Harley
Hello all I have a dtml method which builds a page from various different python scripts. How can I stop the python scripts from being called and passed variables independently of the main dtml method? I've tried some research on proxy roles but couldn't pin it down. ZSQL methods are not

Re: [Zope] Python Script Security

2011-11-18 Thread Bart Jansen
Hi Rich, I am not aware of any method to stop a script from being directly called. You can however check this in the script itself. You could try something like this (untested): if context.REQUEST.get(PUBLISHED) == script: #raise an error here This checks if the currently published

Re: [Zope] Python Script Security

2011-11-18 Thread Brian R Brinegar
Rich, You can modify the permissions on each of your python scripts to require some role, say gatekeeper and then proxy your front-end script to have the role gatekeeper. Then, only users or scripts with the role gatekeeper can call the script directly. Brian Brinegar Purdue University -

Re: [Zope] Python Script Security

2011-11-18 Thread Andreas Jung
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Richard Harley wrote: ZSQL methods are not callable independently I have strong doubts about that claim. - -aj -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

[Zope-CMF] cmf-tests - OK: 3, UNKNOWN: 1

2011-11-18 Thread CMF tests summarizer
This is the summary for test reports received on the cmf-tests list between 2011-11-17 00:00:00 UTC and 2011-11-18 00:00:00 UTC: See the footnotes for test reports of unsuccessful builds. An up-to date view of the builders is also available in our buildbot documentation: