[Zope-dev] attribute protection question

2000-08-21 Thread Chris Withers
In the new security model is it just attributes that are methods that are protected or is it all attributes? For example, I have a lump of text in an Article class which is stored in self.body. Now, would I need body__roles__=None or somethign similar to be able to do: dtml-var body ? cheers,

RE: [Zope-dev] attribute protection question

2000-08-21 Thread Brian Lloyd
In the new security model is it just attributes that are methods that are protected or is it all attributes? All attributes - methods just happen to be the most common case. Now, would I need body__roles__=None or somethign similar to be able to do: dtml-var body Yes, or (better)

RE: [Zope-dev] attribute protection question

2000-08-21 Thread Brian Lloyd
Hmmm. Hence the problem with properties that meant OFS.Item.SimpleItem had to have __allow_access_to_unprotected_subobjects__=1? Can you not just assign roles to properties as they're created or am I missing something else? That's one way to do it - but it will require some thought to