Re: [Zope-dev] RFClarification: Security on Product Attributes

2000-11-10 Thread Steve Alexander
Jim Fulton wrote: > >> Strings; fine, at least they're secure, and when they become proper >> objects in Python 2.0, the problem should go away? > > > Will Python 2.0 let you assign string attributes? % python Python 2.0 (#3, Oct 26 2000, 15:07:09) [GCC 2.95.2 19991024 (release)] on sunos5 T

Re: [Zope-dev] RFClarification: Security on Product Attributes

2000-11-10 Thread Jim Fulton
Chris Withers wrote: > > Okay, apologies in advance for picking up a thread that's been dorman > for so long ;-) > > Jim Fulton wrote: > > > > Chris Withers wrote: > > > > > > self.id = id > > > self.title = 'Title!' > > > self.anInt = 0 > > > self.aString = 'test

Re: [Zope-dev] RFClarification: Security on Product Attributes

2000-11-10 Thread Chris Withers
Okay, apologies in advance for picking up a thread that's been dorman for so long ;-) Jim Fulton wrote: > > Chris Withers wrote: > > > > self.id = id > > self.title = 'Title!' > > self.anInt = 0 > > self.aString = 'testing' > > > None of the > values above can hav

Re: [Zope-dev] RFClarification: Security on Product Attributes

2000-10-05 Thread Jim Fulton
"Phillip J. Eby" wrote: > > At 12:27 PM 10/4/00 -0400, Brian Lloyd wrote: > > > >I've verified (any of my previous comments to the contrary) that > >simple attributes (python types) do not really play in the > >permissions machinery. The canonical way to expose such things > >for now is to expose

Re: [Zope-dev] RFClarification: Security on Product Attributes

2000-10-05 Thread Jim Fulton
Chris Withers wrote: > > Hi, > > If I have the following lines in a Python Product: > > def __init__(self, id): > """initialise a new instance of product""" > self.id = id > self.title = 'Title!' > self.anInt = 0 > self.aString = 'testing' > > Are th

Re: [Zope-dev] RFClarification: Security on Product Attributes

2000-10-05 Thread Chris Withers
"Phillip J. Eby" wrote: > > IIRC, this stuff got broken by the switch to the new security machinery. > ZopeSecurityPolicy doesn't check 'foo__roles__' on the parent object the > way ZPublisher does/did. Can anyone say why? cheers, Chris PS: Will the new new security stuff (still in proposal s

RE: [Zope-dev] RFClarification: Security on Product Attributes

2000-10-04 Thread Phillip J. Eby
At 12:27 PM 10/4/00 -0400, Brian Lloyd wrote: > >I've verified (any of my previous comments to the contrary) that >simple attributes (python types) do not really play in the >permissions machinery. The canonical way to expose such things >for now is to expose them through method calls (which ca

RE: [Zope-dev] RFClarification: Security on Product Attributes

2000-10-04 Thread Brian Lloyd
> If I have the following lines in a Python Product: > > def __init__(self, id): > """initialise a new instance of product""" > self.id = id > self.title = 'Title!' > self.anInt = 0 > self.aString = 'testing' > > Are these attributes protected by the secu

[Zope-dev] RFClarification: Security on Product Attributes

2000-09-26 Thread Chris Withers
Hi, If I have the following lines in a Python Product: def __init__(self, id): """initialise a new instance of product""" self.id = id self.title = 'Title!' self.anInt = 0 self.aString = 'testing' Are these attributes protected by the security machin