Philipp von Weitershausen wrote:
Yes, it's a low-level compiler for Python code that replaces certain operations such as getattr with respective guards. You'll have to provide such guards, though. "Script (Python)" is based on Shared.DC.Scripts which implements such guards that do checks based on AccessControl.

It looks like integrates RestrictedPython with

Ahhhh, I see now...

So, I'm guessing RestrictedPython is the one to aim for?

No idea what you need...

Out of interest, if all non-standard objects (ie: content) are wrapped in security proxies, do getattr and setattr still need to be overridden?



Simplistix - Content Management, Zope & Python Consulting
Zope-Dev maillist  -
**  No cross posts or HTML encoding!  **
(Related lists - )

Reply via email to