Evan Simpson wrote:

>From: "Itai Tavor" <[EMAIL PROTECTED]>
>>  The reason I could do urllib.quote in Python Methods was that I
>>  implemented the MoreBuiltins trick someone described here a while
>>  ago.
>That would be me :-)

Ok ,then, thank you for it :-)

>  > Is there anything that can be done so that adding modules continues
>>  to work?
>Sure.  Since you've already got a MoreBuiltins module, that's probably a
>fine place to put this.  In MoreBuiltins/__init__.py (or a brand new Product
>directory of your choice) put the following lines:
>   import urllib
>   urllib.__allow_access_to_unprotected_subobjects__ = 1
>...and similarly if you want to declare other modules PS-importable.  As of
>2.3, the proper way to do this will be:
>   from AccessControl import ModuleSecurityInfo
>   ModuleSecurityInfo('urllib').setDefaultAccess(1)

Ok, this is simple enough, and it works. But... it opens access to 
everything in urllib. I played around a bit and found that I can't do 
any harm with urlopen because I still don't have access to URLopener 
objects. But urlretrieve does work, and I can imagine being able to 
do some damage with it. MoreBuiltins selected a subset of urllib 
methods to make available for Python Methods - can that be done for 
Python Scripts?
Itai Tavor                    "Je sautille, donc je suis."
C3Works    [EMAIL PROTECTED]              - Kermit the Frog

"If you haven't got your health, you haven't got anything"

Zope-Dev maillist  -  [EMAIL PROTECTED]
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope )

Reply via email to