Gilles Lenfant writes:

Hi,

I'm facing a problem, and perhaps I haven't got enough security enlightenment to close it.

I made a Foo class with a *public* "bar" method (security.declarePublic("bar"))

But I want this method to be available only from python scripts or expressions in DTML/TAL (with no proxy rule), but forbidden through URLs.

To be clearer, if myfoo is a Foo object :

* myfoo.bar() is granted to anonymous users

* http://mysite.com/.../myfoo/bar is restricted

Any hint to do this ?

A simple hack is to remove the docstring from the "bar"-method; methods without docstring will not be published (did You never get the corresponding error message? ;-) HTH, Clemens