Re: [Zope3-Users] Security in Code, example, why does this work?

2006-06-01 Thread Stephan Richter
On Sunday 09 April 2006 09:21, Reinhold Strobl wrote: > So can code always access everything, or not? Filesystem Python code is always trusted. Thus you have no security inside methods. Regards, Stephan -- Stephan Richter CBU Physics & Chemistry (B.S.) / Tufts Physics (Ph.D. student) Web2k - We

Re: [Zope3-Users] Security in Code, example, why does this work?

2006-04-10 Thread Michael Howitz
Reinhold Strobl wrote: Hi, (...) So can code always access everything, or not? In Zope 3 there is also the concept of trusted and untrusted code like in Zope 2 See http://dev.zope.org/Wikis/DevSite/Projects/ComponentArchitecture/ShortTutorial/short.pdf pages 88 - 94 (esp. page 94) In tru

[Zope3-Users] Security in Code, example, why does this work?

2006-04-09 Thread Reinhold Strobl
Hi, I am currently dealing with security and I found a "strange" behaviour of Zope. Ok, I will some up it in short: I have defined the following components: 1. A view component, which I have registered in the following way: So, there is a template a.pt, which calls a method of t