[Zope-dev] Re: Improvements for Zope2's security

2006-09-19 Thread Christian Heimes
Lennart Regebro schrieb: You have many good points in your list of troubles. Many of them are resolved by using security declarations through ZCML instead. It would be interesting to here your views on this. In general I preferre old and well tested security code over new security related

[Zope-dev] Re: Improvements for Zope2's security

2006-09-19 Thread Philipp von Weitershausen
Hey Christian, welcome back! :) Christian Heimes wrote: Lennart Regebro schrieb: You have many good points in your list of troubles. Many of them are resolved by using security declarations through ZCML instead. It would be interesting to here your views on this. In general I preferre old

[Zope-dev] Re: Improvements for Zope2's security

2006-09-19 Thread Philipp von Weitershausen
Christian Heimes wrote: Zope's security declarations have to be called with a method *name* AS STRING. Developers are human beeings and human beeings tend to make small errors like typos. Or they forget to change the security declaration when they rename a method. Zope doesn't raise an error

Re: [Zope-dev] Re: Improvements for Zope2's security

2006-09-19 Thread Sidnei da Silva
On Tue, Sep 19, 2006 at 04:34:55PM +0200, Philipp von Weitershausen wrote: | In general I preferre old and well tested security code over new | security related code. Martjin, Phillip and all the other people are | doing a great job with Five but well ... it's new code. New code tends | to break

Re: [Zope-dev] Re: Improvements for Zope2's security

2006-09-19 Thread Dieter Maurer
Christian Heimes wrote at 2006-9-19 16:02 +0200: ... * As far as I understand the security system Zope2's can't protect attributes and descriptors (properties) with security.declarePrivate('attributename'). Since Zope 2.8, this is no longer true. You can protect simple type attributes and

[Zope-dev] buildbot failure in Zope branches 2.9 2.4 Linux zc-buildbot

2006-09-19 Thread buildbot
The Buildbot has detected a failed build of Zope branches 2.9 2.4 Linux zc-buildbot. Buildbot URL: http://buildbot.zope.org/ Build Reason: changes Build Source Stamp: 7729 Blamelist: alecm,ctheune,fdrake,jim,jukart,srichter BUILD FAILED: failed test sincerely, -The Buildbot

[Zope-dev] buildbot failure in Zope branches 2.9 2.4 Windows 2000 zc-bbwin2

2006-09-19 Thread buildbot
The Buildbot has detected a failed build of Zope branches 2.9 2.4 Windows 2000 zc-bbwin2. Buildbot URL: http://buildbot.zope.org/ Build Reason: changes Build Source Stamp: 7729 Blamelist: alecm,ctheune,fdrake,jim,jukart,srichter BUILD FAILED: failed compile sincerely, -The Buildbot

[Zope-dev] buildbot failure in Zope branches 2.10 2.4 Linux zc-buildbot

2006-09-19 Thread buildbot
The Buildbot has detected a failed build of Zope branches 2.10 2.4 Linux zc-buildbot. Buildbot URL: http://buildbot.zope.org/ Build Reason: changes Build Source Stamp: 7730 Blamelist: alecm,ctheune,fdrake,flox,jim,jukart,rogerineichen,shh,srichter BUILD FAILED: failed test sincerely, -The