Sent: Tuesday, April 28, 2009 11:12:20 AM
Subject: Re: [Zope] how to prevent URL access to an external method?
On Tue, Apr 28, 2009 at 18:25, Pedro LaWrench wrote:
>
> What would you change on the security tab? I still want my authenticated
> users to have access to the method as a call
On Tue, Apr 28, 2009 at 18:25, Pedro LaWrench wrote:
>
> What would you change on the security tab? I still want my authenticated
> users to have access to the method as a call to it is made from unrestricted
> space (such as a page template)
A page template is restricted. If it really was unr
: [Zope] how to prevent URL access to an external method?
Why? It is more transparent and better way - use security tab.
___
Zope maillist - Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related
h
To: zope@zope.org; Tres Seaver
Sent: Tuesday, April 28, 2009 8:50:29 AM
Subject: Re: [Zope] how to prevent URL access to an external method?
Why? It is more transparent and better way - use security tab.
- Original Message -
From: "Tres Seaver"
> -BEGIN PGP SIGNED M
In my opinion Tres's way is the correct one for this case
Why? Because the original must be is to run the script only for internal
processes
The main diference between an internal call and a user one is the REQUEST
parameter and then the Tres's solution seems the more convenient way
It's only my
Why? It is more transparent and better way - use security tab.
- Original Message -
From: "Tres Seaver"
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Pedro LaWrench wrote:
>> I need to do something on the filesystem, which requires unrestricted
>> python, so I created an exte
Excellent. Thank you all for the suggests.
- Original Message
From: Tres Seaver
To: zope@zope.org
Sent: Tuesday, April 28, 2009 8:38:18 AM
Subject: Re: [Zope] how to prevent URL access to an external method?
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Pedro LaWrench wrote:
>
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Pedro LaWrench wrote:
> I need to do something on the filesystem, which requires unrestricted
> python, so I created an external method. The problem is that anyone
> can call that directly via URL, so I added a permission check. Even
> then, users with
external methods the
wrong way to do this?
- Original Message
From: Jonathan (dev101)
To: Pedro LaWrench ; zope@zope.org
Sent: Tuesday, April 28, 2009 8:08:03 AM
Subject: Re: [Zope] how to prevent URL access to an external method?
Within the ExternalMethod you could check the ACTUAL_URL
I don't know what this means. BTW, I'm using Zope 2.9.8, if that matters,
along with Plone 2.5.4.
From: Andreas Jung
To: Pedro LaWrench
Cc: zope@zope.org
Sent: Tuesday, April 28, 2009 8:09:14 AM
Subject: Re: [Zope] how to prevent URL access to a
Click at the Proxy tab at method with "View" permission
- Original Message -
From: "Pedro LaWrench"
I need to do something on the filesystem, which requires unrestricted
python, so I created an external method. The problem is that anyone can call
that directly via URL, so I added a pe
Use a BrowserView?!
-aj
On Tue, Apr 28, 2009 at 17:04, Pedro LaWrench wrote:
>
> I need to do something on the filesystem, which requires unrestricted
> python, so I created an external method. The problem is that anyone can call
> that directly via URL, so I added a permission check. Even then,
, April 28, 2009 11:04 AM
Subject: [Zope] how to prevent URL access to an external method?
I need to do something on the filesystem, which requires unrestricted
python, so I created an external method. The problem is that anyone can call
that directly via URL, so I added a permission check. E
I need to do something on the filesystem, which requires unrestricted python,
so I created an external method. The problem is that anyone can call that
directly via URL, so I added a permission check. Even then, users with the
sufficient permissions can call this via URL, which I don't want the
14 matches
Mail list logo
