[Zope] Python Script Security

2011-11-18 Thread Richard Harley
Hello all I have a dtml method which builds a page from various different python scripts. How can I stop the python scripts from being called and passed variables independently of the main dtml method? I've tried some research on proxy roles but couldn't pin it down. ZSQL methods are not

Re: [Zope] Python Script Security

2011-11-18 Thread Bart Jansen
Hi Rich, I am not aware of any method to stop a script from being directly called. You can however check this in the script itself. You could try something like this (untested): if context.REQUEST.get(PUBLISHED) == script: #raise an error here This checks if the currently published

Re: [Zope] Python Script Security

2011-11-18 Thread Brian R Brinegar
- Original Message - From: Richard Harley rich...@scholarpack.com To: zope@zope.org Sent: Friday, November 18, 2011 1:05:27 PM Subject: [Zope] Python Script Security Hello all I have a dtml method which builds a page from various different python scripts. How can I stop the python scripts from

Re: [Zope] Python Script Security

2011-11-18 Thread Andreas Jung
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Richard Harley wrote: ZSQL methods are not callable independently I have strong doubts about that claim. - -aj -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/