[Zope3-Users] Trusted traversers in z3c.layer: security concerns

2007-09-11 Thread Markus Kemmerling
Hi, In our applications we use `z3c.pagelet` together with the `IPageletBrowserLayer` defined by `z3c.layer.pagelet`. The latter registers two traversers, `SimpleComponentTraverser` and `ItemTraverser`, as trusted adapters. I do not completely understand the reason for doing so (as

AW: [Zope3-Users] Trusted traversers in z3c.layer: security concerns

2007-09-11 Thread Roger Ineichen
Hi Markus Betreff: [Zope3-Users] Trusted traversers in z3c.layer: security concerns [...] Since I can't believe that everybody else using `z3c.form` is also using trusted traversers, I wonder if I am missing something crucial here ... I don't have time right now, but we meet us a the

Re: AW: [Zope3-Users] Trusted traversers in z3c.layer: security concerns

2007-09-11 Thread Markus Kemmerling
Hi Roger, thank you for the quick reply. Am 11.09.2007 um 17:47 schrieb Roger Ineichen: [...] Stephan and I hade a couple of discussions about to write a introspection test framework which shows us what can get accessed and what not, based on the configure.zcml directives registered all over

Re: [Zope3-Users] z3c.form, german umlauts on buttons - small patch, please review

2007-09-11 Thread Andreas Reuleaux
This small patch fixes the problem for me, please review: [EMAIL PROTECTED](~/tmp/z3c.form/src/z3c/form)$ svn diff Index: util.py === --- util.py (Revision 79574) +++ util.py (Arbeitskopie) @@ -30,7 +30,7 @@ def

[Zope3-Users] Zope3 freelance inquiry

2007-09-11 Thread Robert-Reinder Nederhoed
Good evening, I'm looking to hire a Zope3 programmer to help me improve an existing website: http://www.camperconsult.nl/ Over a year ago, I built it in Zope-X3.0. Now it's time to get things up-to-date, so preferably a rewrite in Zope3.3. We might want to add a few new features too. If you're

[Zope3-Users] Re: Zope3 still not compatible with Python2.5

2007-09-11 Thread Philipp von Weitershausen
This is a rather confusing post. I'm not sure what you're trying to say with it. Is Python 2.5 officially supported? No. We never said it was. Does Zope 3.4 actually work on Python 2.5.1? Yes, it works just fine for me and others. For example, Grok runs on Python 2.5.1 no problem [1]. Is

Re: [Zope3-Users] Re: Zope3 still not compatible with Python2.5

2007-09-11 Thread Jim Washington
Philipp von Weitershausen wrote: This is a rather confusing post. I'm not sure what you're trying to say with it. Is Python 2.5 officially supported? No. We never said it was. Does Zope 3.4 actually work on Python 2.5.1? Yes, it works just fine for me and others. For example, Grok runs on