Paul Winkler wrote:

On Thu, Dec 01, 2005 at 09:04:11PM +0100, Jean-Marc Orliaguet wrote:
You need to call InitializeClass on your object, and that's it.

cf http://www.upfrontsystems.co.za/courses/zope/ch04.html

under "Zopifying our Python classes"

initializeClass() only helps if the class you feed it
inherits from Acquisition.Implicit or Acquisition.Explicit,
and has some security declarations in it.


for protected methods, but what if your methods are public?

http://www.zope.org/Wikis/DevSite/Projects/DeclarativeSecurity/ZopeSecurityForDevelopers/wikipage_view

------------------------
- It is important to note what can and cannot be protected using the |SecurityInfo| interface. First, the security policy relies on /Acquisition/ to aggregate access control information, so any class that needs to work in the security policy must have either |Acquisition.Implicit| or |Acquisition.Explicit| in its base class hierarchy.

- if the object has a security assertion that it is /public/ then access will be granted
------------------------

does zope2 do an access control based on acquisition for public methods, that would be a waste of resources since the answer is always "yes, granted" ?

/JM


_______________________________________________
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )

Reply via email to