[Zope] Re: External Methods

2006-04-03 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dennis Allison wrote: > When Zope is run in production (as opposed to debug) mode, modifications > to External Methods are not sensed. What's the programatic way to get > them all refreshed? Not a use case for production servers. Your best bet

Re: [Zope] Re: External Methods, Proxy Roles, and Executable Security

2005-11-23 Thread Dieter Maurer
Tres Seaver wrote at 2005-11-22 16:51 -0500: > ... >The actual problem here is a confusion of "authorization" with >"containment constraints": the CopySupport code is using a single check >to test both, which makes it impossible to do the Right Thing (TM): >either the proxy roles should be taken i

[Zope] Re: External Methods, Proxy Roles, and Executable Security

2005-11-22 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jens Vagelpohl wrote: > > On 22 Nov 2005, at 20:08, Dieter Maurer wrote: > >> You have lost the thread's start: >> >> George's problem has been that he could not move an object >> in an *EXTERNAL METHOD*, i.e. in trusted filesystem code. >> >>

[Zope] Re: External Methods, Proxy Roles, and Executable Security

2005-11-18 Thread George Lee
p.s. This is in the context of a external method in a workflow scripts folder, if that helps. Peace, George On 11/19/05, George Lee <[EMAIL PROTECTED]> wrote: > In CMFCore 1.5.4: > > If a low-security-clearance user calls an external method that pastes > an object from a PortalFolder, he gets