Hi, I am a student participating in Google Summer of code 2008. My proposal to the Zope foundation is to port Zope2 to Python2.5. I am aware of the works done earlier for porting Zope3 and the issue like restricted python implementation. Please give some suggestions on this project. With regards, Ranjith
ranjith kannikara wrote:
I am a student participating in Google Summer of code 2008. My proposal to the Zope foundation is to port Zope2 to Python2.5. I am aware of the works done earlier for porting Zope3 and the issue like restricted python implementation. Please give some suggestions on this project.
Zope's not the only ones doing a restricted python implementation. It might be interesting to see what's out there. Then there's the AccessControl-module which has a C-implementation; it would need to be ported as well. (Asking to the room), is it out of reach to simply migrate to zope.security (which already runs on Python 2.5)? Obviously there are differences between the two to the extent that some features simply can't be implemented. \malthe
Malthe Borch wrote:
(Asking to the room), is it out of reach to simply migrate to zope.security (which already runs on Python 2.5)? Obviously there are differences between the two to the extent that some features simply can't be implemented.
zope.security uses RestrictedPython, iirc... Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk
On 04/04/2008, Chris Withers <chris@simplistix.co.uk> wrote:
zope.security uses RestrictedPython, iirc...
For untrusted python, yes –– but is anyone using this (in Zope 3)? It's integral to most Zope 2 applications of course to allow secure execution of Python scripts, so we will need to port RestrictedPython eventually. \malthe
On Apr 3, 2008, at 7:09 PM, Malthe Borch wrote:
On 04/04/2008, Chris Withers <chris@simplistix.co.uk> wrote:
zope.security uses RestrictedPython, iirc...
For untrusted python, yes –– but is anyone using this (in Zope 3)?
It's integral to most Zope 2 applications of course to allow secure execution of Python scripts, so we will need to port RestrictedPython eventually.
I *think* this was ported. Zope 3 does use it to moderate attribute access to simple objects, which aren't security proxied, in untrusted code. Jim -- Jim Fulton Zope Corporation
On Apr 3, 2008, at 7:09 PM, Malthe Borch wrote:
On 04/04/2008, Chris Withers <chris@simplistix.co.uk> wrote:
zope.security uses RestrictedPython, iirc...
For untrusted python, yes –– but is anyone using this (in Zope 3)?
Yup. Gary
Malthe Borch wrote:
On 04/04/2008, Chris Withers <chris@simplistix.co.uk> wrote:
zope.security uses RestrictedPython, iirc...
For untrusted python, yes –– but is anyone using this (in Zope 3)?
It's integral to most Zope 2 applications of course to allow secure execution of Python scripts, so we will need to port RestrictedPython eventually.
Btw, it would also be nice to have RestrictedPython outside of Zope for example to use in pl/python (postgres pluggable function language) Of course this smells like another GSoC project... Greets Tino
Hi, Thanks for these suggestions. I will make adequate changes in my proposal according to this. Regards, Ranjith Kannikara
Tino Wildenhain wrote:
Btw, it would also be nice to have RestrictedPython outside of Zope for example to use in pl/python (postgres pluggable function language)
Of course this smells like another GSoC project...
I don't think RestrictedPython has (m)any dependencies, and it may even be available as a seperate egg already. I'd certainly be up for championing making RestrictedPython available as a seperate project. Has anyone done any work towards this or should I go ahead and get a project / bug tracker / etc set up at Launchpad? Also, do we have any clarity on whether or not RestrictedPython works in Python 2.5? I thought that was the one big nasty that didn't get done in last years GSoC project... cheers, Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk
On 07/04/2008, Chris Withers <chris@simplistix.co.uk> wrote:
I'd certainly be up for championing making RestrictedPython available as a seperate project. Has anyone done any work towards this or should I go ahead and get a project / bug tracker / etc set up at Launchpad?
RestrictedPython depends only on zope.testing.
Also, do we have any clarity on whether or not RestrictedPython works in Python 2.5? I thought that was the one big nasty that didn't get done in last years GSoC project...
valga:~/co/RestrictedPython mborch$ python2.5 bootstrap.py Downloading http://pypi.python.org/packages/2.5/s/setuptools/setuptools-0.6c8-py2.5.egg Creating directory '/Users/mborch/co/RestrictedPython/bin'. Creating directory '/Users/mborch/co/RestrictedPython/parts'. Creating directory '/Users/mborch/co/RestrictedPython/develop-eggs'. Generated script '/Users/mborch/co/RestrictedPython/bin/buildout'. valga:~/co/RestrictedPython mborch$ bin/buildout Develop: '/Users/mborch/co/RestrictedPython/.' Unused options for buildout: 'download-directory'. Installing interpreter. Generated interpreter '/Users/mborch/co/RestrictedPython/bin/python'. Installing test. Generated script '/Users/mborch/co/RestrictedPython/bin/test'. valga:~/co/RestrictedPython mborch$ bin/test Running unit tests: Ran 42 tests with 0 failures and 0 errors in 0.412 seconds. valga:~/co/RestrictedPython mborch$ \malthe
Malthe Borch wrote:
On 07/04/2008, Chris Withers <chris@simplistix.co.uk> wrote:
I'd certainly be up for championing making RestrictedPython available as a seperate project. Has anyone done any work towards this or should I go ahead and get a project / bug tracker / etc set up at Launchpad?
RestrictedPython depends only on zope.testing.
...and I'll bet that's only to run the tests, so should be removed as a "hard" dependency
Also, do we have any clarity on whether or not RestrictedPython works in Python 2.5? I thought that was the one big nasty that didn't get done in last years GSoC project...
valga:~/co/RestrictedPython mborch$ python2.5 bootstrap.py Downloading http://pypi.python.org/packages/2.5/s/setuptools/setuptools-0.6c8-py2.5.egg Creating directory '/Users/mborch/co/RestrictedPython/bin'. Creating directory '/Users/mborch/co/RestrictedPython/parts'. Creating directory '/Users/mborch/co/RestrictedPython/develop-eggs'. Generated script '/Users/mborch/co/RestrictedPython/bin/buildout'. valga:~/co/RestrictedPython mborch$ bin/buildout Develop: '/Users/mborch/co/RestrictedPython/.' Unused options for buildout: 'download-directory'. Installing interpreter. Generated interpreter '/Users/mborch/co/RestrictedPython/bin/python'. Installing test. Generated script '/Users/mborch/co/RestrictedPython/bin/test'. valga:~/co/RestrictedPython mborch$ bin/test Running unit tests: Ran 42 tests with 0 failures and 0 errors in 0.412 seconds. valga:~/co/RestrictedPython mborch$
Really? Cool, I could have sworn that never got done. Thanks, you just made my day :-) Now, does anyone want me to set up a Launchpad project for this? How do I go about building a Python 2.5 egg and/or a Python 2.5 windows binary installer? cheers, Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk
On 07/04/2008, Chris Withers <chris@simplistix.co.uk> wrote:
...and I'll bet that's only to run the tests, so should be removed as a "hard" dependency
Actually, only the tests require it –– sorry :-)
Now, does anyone want me to set up a Launchpad project for this? How do I go about building a Python 2.5 egg and/or a Python 2.5 windows binary installer?
What would the project be about then, if it indeed does work? \malthe
Previously Malthe Borch wrote:
On 07/04/2008, Chris Withers <chris@simplistix.co.uk> wrote:
...and I'll bet that's only to run the tests, so should be removed as a "hard" dependency
Actually, only the tests require it –– sorry :-)
Now, does anyone want me to set up a Launchpad project for this? How do I go about building a Python 2.5 egg and/or a Python 2.5 windows binary installer?
What would the project be about then, if it indeed does work?
The rest of Zope2? His post already said he was aware of the work done on porting RestrictedPython so this is hardly news. Wichert. -- Wichert Akkerman <wichert@wiggy.net> It is simple to make things. http://www.wiggy.net/ It is hard to make things simple.
Malthe Borch wrote:
On 04/04/2008, Chris Withers <chris@simplistix.co.uk> wrote:
zope.security uses RestrictedPython, iirc...
For untrusted python, yes –– but is anyone using this (in Zope 3)?
Given that Ranjith's post was specifically about Zope 2, I think it'd kindof relevent to his project ;-) Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk
participants (7)
-
Chris Withers -
Gary Poster -
Jim Fulton -
Malthe Borch -
ranjith kannikara -
Tino Wildenhain -
Wichert Akkerman