Re: [Zope-dev] Security validation issue

2004-01-30 Thread Herman Geldenhuys
Hi

> Herman Geldenhuys wrote:
>
> > I've written a Zope product that exposes a "MenuItem". I add a menuItem
> > in a Zope folder, and I have no difficulty accessing and editing it via
> > the ZMI. I've written an xml-rpc-like protocol for Zope, that basically
> > validates the security "manually".
>
> What do you mean by "manually"?

By manually I mean that I have to do the validation myself. I have written a
new protocol that plugs into the Zope application server. It's called OZE
and I am about to release the source on sourceforge. Its an RPC-like
protocol. But in a nutshell, I must do the security validation myself,
because I bypass a few usual-Zope elements in the framework.

I will gladly answer any other questions, but will this satisfy for now?

H

- Original Message - 
From: "Chris Withers" <[EMAIL PROTECTED]>
To: "Herman Geldenhuys" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Friday, January 30, 2004 10:48 AM
Subject: Re: [Zope-dev] Security validation issue


> Herman Geldenhuys wrote:
>
> > I've written a Zope product that exposes a "MenuItem". I add a menuItem
> > in a Zope folder, and I have no difficulty accessing and editing it via
> > the ZMI. I've written an xml-rpc-like protocol for Zope, that basically
> > validates the security "manually".
>
> What do you mean by "manually"?
>
> > This code works for any other default Zope type, but not mine. Did I
> > perhaps forgot a permission or something?
>
> Did you do security declarations for that method?
>
> > I can access this fine via the ZMI, but when I validate it this way,
> > python just starts cursing at me.
>
> Why are you doing you own validation? ;-)
>
> cheers,
>
> Chris
>


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope-dev] Security validation issue

2004-01-30 Thread Chris Withers
Herman Geldenhuys wrote:

I've written a Zope product that exposes a "MenuItem". I add a menuItem 
in a Zope folder, and I have no difficulty accessing and editing it via 
the ZMI. I've written an xml-rpc-like protocol for Zope, that basically 
validates the security "manually".
What do you mean by "manually"?

This code works for any other default Zope type, but not mine. Did I 
perhaps forgot a permission or something?
Did you do security declarations for that method?

I can access this fine via the ZMI, but when I validate it this way, 
python just starts cursing at me.
Why are you doing you own validation? ;-)

cheers,

Chris

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope )