Re: [Zope-dev] Re: Grrr... Python Scripts

2001-05-11 Thread Chris Withers
Evan Simpson wrote: > > From: "Chris Withers" <[EMAIL PROTECTED]> > > Could that we added to PythonScripts/standard.py so I don't have to do it > all > > the time? > > This is just part of a general security review that needs to happen. I thought that happened in 2.2? > I > suppose we need a

Re: [Zope-dev] Re: Grrr... Python Scripts

2001-05-11 Thread Evan Simpson
From: "Chris Withers" <[EMAIL PROTECTED]> > Could that we added to PythonScripts/standard.py so I don't have to do it all > the time? This is just part of a general security review that needs to happen. I suppose we need a place to collect suggestions about objects that ought to be exposed to re

Re: [Zope-dev] Re: Grrr... Python Scripts

2001-05-11 Thread Chris McDonough
Chris Withers wrote: > Maybe this could be bundled into the RestrictedPython work? I think it needs to be its own project... the RestrictedPython work is being done at a much lower level than this. ___ Zope-Dev maillist - [EMAIL PROTECTED] http://l

Re: [Zope-dev] Re: Grrr... Python Scripts

2001-05-11 Thread Chris Withers
Chris McDonough wrote: > > We actually need to do something to make a whole bunch of default stuff > importable and usable from within Python Scripts, it's just a matter of > which modules/classes to add security declarations for. Maybe this could be bundled into the RestrictedPython work? >

Re: [Zope-dev] Re: Grrr... Python Scripts

2001-05-11 Thread Chris McDonough
We actually need to do something to make a whole bunch of default stuff importable and usable from within Python Scripts, it's just a matter of which modules/classes to add security declarations for. It's also a matter of when, and who. This needs to go through the fishbowl, likely. Now if only

Re: [Zope-dev] Re: Grrr... Python Scripts

2001-05-11 Thread Chris Withers
Chris McDonough wrote: > > Here Chris, I'll try to solve your pain (untested): > > from AccessControl import ModuleSecurityInfo > ModuleSecurityInfo('Products').declarePublic('Catalog') > ModuleSecurityInfo('Products.Catalog').declarePublic('CatalogError') Could that we added to PythonScripts/s

Re: [Zope-dev] Re: Grrr... Python Scripts

2001-05-08 Thread Chris McDonough
- Original Message - From: "Chris Withers" <[EMAIL PROTECTED]> To: "Evan Simpson" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Tuesday, May 08, 2001 9:02 AM Subject: Re: [Zope-dev] Re: Grrr... Python Scripts > Evan Simpson wrote: > >

Re: [Zope-dev] Re: Grrr... Python Scripts

2001-05-08 Thread Chris Withers
Evan Simpson wrote: > > Use the same security process as providing access to anything Zope doesn't > already expose. Wgh! :~( > We should expose exceptions like this by default, but we > haven't yet. Sorry. No worries, where should I be looking to implement this? Woudl a patch eb likely