[Zope-dev] Re: KGS Site Updated

2007-11-19 Thread Alexander Limi
On Sun, 18 Nov 2007 23:17:53 -0800, Stephan Richter <[EMAIL PROTECTED]> wrote: So if you go to http://download.zope.org/zope3.4/intro.html into the sub-section "Version 3.4.0b2" you see a bunch of links. Just a minor observation, nowhere on that page is it explained what KGS means. :) --

AW: [Zope-dev] KGS Site Updated

2007-11-19 Thread Roger Ineichen
Hi Dieter > Betreff: Re: [Zope-dev] KGS Site Updated > > Chris McDonough wrote at 2007-11-18 16:50 -0500: > > ... > >Note that if the KGS really wants to be a KGS (literally > "known good", > >it's a matter of semantics, not of technology): > > > >- An invariant must be met that only one versio

[Zope-dev] Re: RestrtrictedPython vs zope.security.untrustedpython

2007-11-19 Thread Philipp von Weitershausen
On 20 Nov 2007, at 00:15 , Chris Withers wrote: Philipp von Weitershausen wrote: On 19 Nov 2007, at 20:26 , Chris Withers wrote: So, I'm guessing RestrictedPython is the one to aim for? No idea what you need... http://mail.python.org/pipermail/python-list/2007-November/466438.html It seems l

[Zope-dev] Re: RestrtrictedPython vs zope.security.untrustedpython

2007-11-19 Thread Chris Withers
Philipp von Weitershausen wrote: On 19 Nov 2007, at 20:26 , Chris Withers wrote: So, I'm guessing RestrictedPython is the one to aim for? No idea what you need... http://mail.python.org/pipermail/python-list/2007-November/466438.html It seems like zope.security does exactly what you need (e

Re: [Zope-dev] KGS Site Updated

2007-11-19 Thread Stephan Richter
On Monday 19 November 2007, Chris McDonough wrote: > Now we just need to define what a "release"   > is ;-) Yes, I thought about this a little bit this weekend and I would love to see some discussion. For example, I do not think it will be necessary to create a new release for every change in th

[Zope-dev] Re: [Zope3-Users] Re: KGS Site Updated

2007-11-19 Thread Jim Fulton
On Nov 19, 2007, at 2:52 PM, Tres Seaver wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jim Fulton wrote: On Nov 19, 2007, at 9:54 AM, Tres Seaver wrote: It's a limitation of buildout, perhaps. It is possible to use setuptools with multiple indexes: 'compoze' allows spelling multip

[Zope-dev] Re: RestrtrictedPython vs zope.security.untrustedpython

2007-11-19 Thread Philipp von Weitershausen
On 19 Nov 2007, at 20:26 , Chris Withers wrote: So, I'm guessing RestrictedPython is the one to aim for? No idea what you need... http://mail.python.org/pipermail/python-list/2007-November/466438.html It seems like zope.security does exactly what you need (e.g. user code shouldn't have to

[Zope-dev] Re: [Zope3-Users] Re: KGS Site Updated

2007-11-19 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jim Fulton wrote: > On Nov 19, 2007, at 9:54 AM, Tres Seaver wrote: >> It's a limitation of buildout, perhaps. It is possible to use >> setuptools with multiple indexes: 'compoze' allows spelling multiple >> '-index-url' items on the command line. E

Re: [Zope-dev] KGS Site Updated

2007-11-19 Thread Chris McDonough
On Nov 19, 2007, at 1:26 PM, Dieter Maurer wrote: Chris McDonough wrote at 2007-11-18 16:50 -0500: ... Note that if the KGS really wants to be a KGS (literally "known good", it's a matter of semantics, not of technology): - An invariant must be met that only one version of each package sho

[Zope-dev] Re: RestrtrictedPython vs zope.security.untrustedpython

2007-11-19 Thread Chris Withers
Philipp von Weitershausen wrote: Yes, it's a low-level compiler for Python code that replaces certain operations such as getattr with respective guards. You'll have to provide such guards, though. "Script (Python)" is based on Shared.DC.Scripts which implements such guards that do checks based

[Zope-dev] Re: [Zope3-Users] Re: KGS Site Updated

2007-11-19 Thread Jim Fulton
On Nov 19, 2007, at 9:54 AM, Tres Seaver wrote: It's a limitation of buildout, perhaps. It is possible to use setuptools with multiple indexes: 'compoze' allows spelling multiple '-index-url' items on the command line. E.g.:: I'm curious what API you're using. buildout uses setuptools.pack

[Zope-dev] Re: RestrtrictedPython vs zope.security.untrustedpython

2007-11-19 Thread Philipp von Weitershausen
Chris Withers wrote: Tres Seaver wrote: Both are. RestrictedPython is still used in Zope2. Ah, so RestrictedPython is actually what's used for Script (Python)'s in current Zope 2 releases? Yes, it's a low-level compiler for Python code that replaces certain operations such as getattr wit

Re: [Zope-dev] KGS Site Updated

2007-11-19 Thread Dieter Maurer
Chris McDonough wrote at 2007-11-18 16:50 -0500: > ... >Note that if the KGS really wants to be a KGS (literally "known good", >it's a matter of semantics, not of technology): > >- An invariant must be met that only one version of each package >should be present in the index. > >- The set is fr

[Zope-dev] RestrtrictedPython vs zope.security.untrustedpython

2007-11-19 Thread Chris Withers
Tres Seaver wrote: Both are. RestrictedPython is still used in Zope2. Ah, so RestrictedPython is actually what's used for Script (Python)'s in current Zope 2 releases? That's a big positive selling point for me ;-) I think RestrictedPython is also "used" (ie: bundled with) Zope 3 given th

[Zope-dev] Re: does zope 3 still have a restricted python environment?

2007-11-19 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chris Withers wrote: > Chris Withers wrote: >> I know we have security proxies nowadays and I'm hoping these have made >> things much more efficient that the old Zope 2 way of doing things >> (anyone have any ideas on this?) but is there still a way of

[Zope-dev] Re: KGS Site Updated

2007-11-19 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chris McDonough wrote: > On Nov 18, 2007, at 7:52 PM, Stephan Richter wrote: > >> On Sunday 18 November 2007, Chris McDonough wrote: 4. A new "minimal/" folder now contains an index just of the controlled packages. This minimal index ca

Re: [Zope-dev] does zope 3 still have a restricted python environment?

2007-11-19 Thread Chris Withers
Chris Withers wrote: I know we have security proxies nowadays and I'm hoping these have made things much more efficient that the old Zope 2 way of doing things (anyone have any ideas on this?) but is there still a way of running a piece of python in an environment where imports are controlled and

[Zope-dev] Re: KGS Site Updated

2007-11-19 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Stephan Richter wrote: > On Sunday 18 November 2007, Chris McDonough wrote: >>> 4. A new "minimal/" folder now contains an index just of the >>> controlled >>> packages. This minimal index can be used by compoze as one >>> contributing >>> index. (I ha

[Zope-dev] does zope 3 still have a restricted python environment?

2007-11-19 Thread Chris Withers
Hi All, I know we have security proxies nowadays and I'm hoping these have made things much more efficient that the old Zope 2 way of doing things (anyone have any ideas on this?) but is there still a way of running a piece of python in an environment where imports are controlled and "dangerous"

[Zope-dev] Zope Tests: 5 OK

2007-11-19 Thread Zope Tests Summarizer
Summary of messages to the zope-tests list. Period Sun Nov 18 13:00:00 2007 UTC to Mon Nov 19 13:00:00 2007 UTC. There were 5 messages: 5 from Zope Unit Tests. Tests passed OK --- Subject: OK : Zope-2.7 Python-2.3.6 : Linux From: Zope Unit Tests Date: Sun Nov 18 20:54:11 EST 2007 URL

Re: [Zope-dev] KGS Site Updated

2007-11-19 Thread Chris McDonough
On Nov 19, 2007, at 2:17 AM, Stephan Richter wrote: On Sunday 18 November 2007, Chris McDonough wrote: I disagree. This is not what this means to me. I think a KGS can receive bug fix releases, which the Zope 3.4 KGS does. However, no new feature releases are allowed. In the Linux world, thes