[Zope-dev] zope-tests - FAILED: 4, OK: 40, UNKNOWN: 2
This is the summary for test reports received on the zope-tests list between 2011-11-17 00:00:00 UTC and 2011-11-18 00:00:00 UTC: See the footnotes for test reports of unsuccessful builds. An up-to date view of the builders is also available in our buildbot documentation: http://docs.zope.org/zopetoolkit/process/buildbots.html#the-nightly-builds Reports received Bluebream / Python2.5.5 64bit linux Bluebream / Python2.6.7 64bit linux Bluebream / Python2.7.2 64bit linux [1]UNKNOWN : Zope-trunk Python-2.6.6 : Linux [2]UNKNOWN : Zope-trunk-alltests Python-2.6.6 : Linux ZTK 1.0 / Python2.4.6 Linux 64bit ZTK 1.0 / Python2.5.5 Linux 64bit ZTK 1.0 / Python2.6.7 Linux 64bit [3]ZTK 1.0dev / Python2.4.6 Linux 64bit ZTK 1.0dev / Python2.5.5 Linux 64bit ZTK 1.0dev / Python2.6.7 Linux 64bit ZTK 1.1 / Python2.5.5 Linux 64bit ZTK 1.1 / Python2.6.7 Linux 64bit ZTK 1.1 / Python2.7.2 Linux 64bit ZTK 1.1dev / Python2.5.5 Linux 64bit ZTK 1.1dev / Python2.6.7 Linux 64bit ZTK 1.1dev / Python2.7.2 Linux 64bit Zope 3.4 KGS / Python2.4.6 64bit linux Zope 3.4 KGS / Python2.5.5 64bit linux [4]Zope 3.4 Known Good Set / py2.4-32bit-linux Zope 3.4 Known Good Set / py2.4-64bit-linux [5]Zope 3.4 Known Good Set / py2.5-32bit-linux Zope 3.4 Known Good Set / py2.5-64bit-linux Zope-2.10 Python-2.4.6 : Linux Zope-2.11 Python-2.4.6 : Linux Zope-2.12 Python-2.6.6 : Linux Zope-2.12-alltests Python-2.6.6 : Linux Zope-2.13 Python-2.6.6 : Linux Zope-2.13-alltests Python-2.6.6 : Linux winbot / ZODB_dev py_254_win32 winbot / ZODB_dev py_265_win32 winbot / ZODB_dev py_270_win32 winbot / ZODB_dev py_270_win64 [6]winbot / zc.resourcelibrary_py_265_32 winbot / ztk_10 py_254_win32 winbot / ztk_10 py_265_win32 winbot / ztk_10 py_265_win64 winbot / ztk_11 py_254_win32 winbot / ztk_11 py_265_win32 winbot / ztk_11 py_265_win64 winbot / ztk_11 py_270_win32 winbot / ztk_11 py_270_win64 winbot / ztk_dev py_265_win32 winbot / ztk_dev py_265_win64 winbot / ztk_dev py_270_win32 winbot / ztk_dev py_270_win64 Non-OK results -- [1]UNKNOWN UNKNOWN : Zope-trunk Python-2.6.6 : Linux https://mail.zope.org/pipermail/zope-tests/2011-November/052856.html [2]UNKNOWN UNKNOWN : Zope-trunk-alltests Python-2.6.6 : Linux https://mail.zope.org/pipermail/zope-tests/2011-November/052857.html [3]FAILED ZTK 1.0dev / Python2.4.6 Linux 64bit https://mail.zope.org/pipermail/zope-tests/2011-November/052845.html [4]FAILED Zope 3.4 Known Good Set / py2.4-32bit-linux https://mail.zope.org/pipermail/zope-tests/2011-November/052835.html [5]FAILED Zope 3.4 Known Good Set / py2.5-32bit-linux https://mail.zope.org/pipermail/zope-tests/2011-November/052841.html [6]FAILED winbot / zc.resourcelibrary_py_265_32 https://mail.zope.org/pipermail/zope-tests/2011-November/052836.html ___ Zope-Dev maillist - Zope-Dev@zope.org https://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - https://mail.zope.org/mailman/listinfo/zope-announce https://mail.zope.org/mailman/listinfo/zope )
[Zope] Python Script Security
Hello all I have a dtml method which builds a page from various different python scripts. How can I stop the python scripts from being called and passed variables independently of the main dtml method? I've tried some research on proxy roles but couldn't pin it down. ZSQL methods are not callable independently and I would like Python Scripts to behave the same. TIA Rich ___ Zope maillist - Zope@zope.org https://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - https://mail.zope.org/mailman/listinfo/zope-announce https://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Python Script Security
Hi Rich, I am not aware of any method to stop a script from being directly called. You can however check this in the script itself. You could try something like this (untested): if context.REQUEST.get(PUBLISHED) == script: #raise an error here This checks if the currently published object equals the current script. Bart On 11/18/11 19:05, Richard Harley wrote: Hello all I have a dtml method which builds a page from various different python scripts. How can I stop the python scripts from being called and passed variables independently of the main dtml method? I've tried some research on proxy roles but couldn't pin it down. ZSQL methods are not callable independently and I would like Python Scripts to behave the same. TIA Rich ___ Zope maillist - Zope@zope.org https://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - https://mail.zope.org/mailman/listinfo/zope-announce https://mail.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - Zope@zope.org https://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - https://mail.zope.org/mailman/listinfo/zope-announce https://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Python Script Security
Rich, You can modify the permissions on each of your python scripts to require some role, say gatekeeper and then proxy your front-end script to have the role gatekeeper. Then, only users or scripts with the role gatekeeper can call the script directly. Brian Brinegar Purdue University - Original Message - From: Richard Harley rich...@scholarpack.com To: zope@zope.org Sent: Friday, November 18, 2011 1:05:27 PM Subject: [Zope] Python Script Security Hello all I have a dtml method which builds a page from various different python scripts. How can I stop the python scripts from being called and passed variables independently of the main dtml method? I've tried some research on proxy roles but couldn't pin it down. ZSQL methods are not callable independently and I would like Python Scripts to behave the same. TIA Rich ___ Zope maillist - Zope@zope.org https://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - https://mail.zope.org/mailman/listinfo/zope-announce https://mail.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - Zope@zope.org https://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - https://mail.zope.org/mailman/listinfo/zope-announce https://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Python Script Security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Richard Harley wrote: ZSQL methods are not callable independently I have strong doubts about that claim. - -aj -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQGUBAEBAgAGBQJOx1dhAAoJEADcfz7u4AZjfzgLv2u1lysJYgKfhg6TSYN3hc0E UXaxu6odJX1ONxPmP0RIaYy1qKW10tF5uzvNk2OfY7N+11MhE6ZB9en0HsUsp3Yx YYilBV3vh6AZ5CCRyftJ9WwBEgN/knEb254F/Xs2Ieclh1yFEcrBFy918p+jwEp7 yUBHWOYBlHylx1P3qWtIQ13S5mNVGAugVpST+1XT4ks84jhk4H9aPreROzIPGZDu dPgJ/9wuztwHa4Yb6yQ6NtN5uWdv23hBlEd06Z4v1FgtlDGdDrIR489eFWaAZXJl KdgPOBVXNeh6TuccvqK4pkguDUQpZLpYOzwy/OvdJHxzWy4ziHerScY4HvDVMULT 97b2oszPHAzMwXM9W3Lq2kR9P6fem6pM6aETot9aAChtKafTHt0C/sMJOuenI89B h2GERRYK7nf72tREVBpb6kcxuLYpokzDgDaHmcyT/gUgTG02C4CTQOuDfmOfp7rL 1kGBTv9HVvTONKcoXjEwDJHab/vOmPM= =+Nx/ -END PGP SIGNATURE- attachment: lists.vcf___ Zope maillist - Zope@zope.org https://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - https://mail.zope.org/mailman/listinfo/zope-announce https://mail.zope.org/mailman/listinfo/zope-dev )
[Zope-CMF] cmf-tests - OK: 3, UNKNOWN: 1
This is the summary for test reports received on the cmf-tests list between 2011-11-17 00:00:00 UTC and 2011-11-18 00:00:00 UTC: See the footnotes for test reports of unsuccessful builds. An up-to date view of the builders is also available in our buildbot documentation: http://docs.zope.org/zopetoolkit/process/buildbots.html#the-nightly-builds Reports received CMF-2.2 Zope-2.12 Python-2.6.6 : Linux CMF-2.2 Zope-2.13 Python-2.6.6 : Linux CMF-trunk Zope-2.13 Python-2.6.6 : Linux [1]UNKNOWN : CMF-trunk Zope-trunk Python-2.6.6 : Linux Non-OK results -- [1]UNKNOWN UNKNOWN : CMF-trunk Zope-trunk Python-2.6.6 : Linux https://mail.zope.org/pipermail/cmf-tests/2011-November/015501.html ___ Zope-CMF maillist - Zope-CMF@zope.org https://mail.zope.org/mailman/listinfo/zope-cmf See https://bugs.launchpad.net/zope-cmf/ for bug reports and feature requests
