Re: [Zope-dev] Ids starting with _

2000-07-31 Thread Toby Dickenson 

On Sun, 30 Jul 2000 10:38:44 +0100, Chris Withers [EMAIL PROTECTED]
wrote:

Dieter Maurer wrote:
   I wonder why starting folders with _ is so bad in Zope?

 In the time, when everything was allowed what was not explicitely
 forbidden, an easy way was necessary to forbid access. Jim
 (and, therefore, Zope) used:
 
   anything starting with "_" is private: no DTML access, no Web access.
 
 Now, with the change to a security policy "Everything is
 forbidden when not explicitely allowed", the need for
 such a rule based on naming dwindles. Maybe, it will disappear
 sometime in the future.

That rules applies at a lower level. It removes the need to have
special-case handling for the many low-level objects that should never
be web-accessible.

Almost all zope-manageable classes (and certainly Folders, that Dieter
mentioned) use the old rule. This happens because they derive from
SimpleItem.Item, which has __allow_access_to_unprotected_subobjects__.





Toby Dickenson
[EMAIL PROTECTED]

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

Re: [Zope-dev] Ids starting with _

2000-07-31 Thread Chris Withers 

Toby Dickenson wrote:
 Almost all zope-manageable classes (and certainly Folders, that Dieter
 mentioned) use the old rule. This happens because they derive from
 SimpleItem.Item, which has __allow_access_to_unprotected_subobjects__=1

1) Why does SimpleItem still have this?! Since so much, IIRC, is derived
from SimpleItem.Item, surely this goes very much against the grain of
'everything should be protected unless I say otherwise'?

2) Why does having __allow_access_to_unprotected_subobjects__=1 mean
that the 'start with _ = hidden/no DTML, no web Access' ruel applies?

cheers,

Chris

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )