99% sane people, in development - would like to turn MOST security restrictions off. Is there a way to tell Guard.py, "down boy!" ??
How about giving all developers the Manager role? Do you really have only 1% of the people in Marketing? :-) Regards, René Pijlman
-----Original Message----- From: zope-admin@zope.org [mailto:zope-admin@zope.org]On Behalf Of alan runyan Sent: vrijdag 22 juni 2001 16:01 To: zope@zope.org Subject: [Zope] (Script) Python needs xmlrpclib
There are magical things beyond my control happening - security mechanisms. As this is a security issue and there is no way (that I know) around it -- its that much more frustrating. 99% of sane people, in development - would like to turn MOST security restrictions off. Is there a way to tell Guard.py, "down boy!" ??
dealing with BEA Weblogic (which relies on Java's security model) -- there are the same issues. but you can basically tell the Java Security model allow_what_god_shouldnt_be_able_to_do.
please someone shed light on this. it seems no one I run across understands how to do this (use External Method, is the response I get) or anything about the new security model of ZOPE. -- which *appears* to be understandable and sane. NOTE: External Methods (which are what most people use, I would bet) have 0 security mechanism. that is why they are so powerful. ZOPE preaches TTW. (Script) Python needs to be able to have as much power as External Methods, IMO.
~runyaga
trying to get (Script) Python to use xmlrpclib
here is my (Script) Python, getXML: from Products.ExposedModules.xmlrpclib import Server s=Server('http://betty.userland.com') n=s.examples.getStateName(41) return n
here is my lib/python/Products/ExposedModules/__init__.py: from Products.PythonScripts.Utility import allow_module, allow_class from AccessControl import ModuleSecurityInfo, ClassSecurityInfo from Globals import InitializeClass import xmlrpclib
ModuleSecurityInfo('Products').declarePublic('ExposedModules') ModuleSecurityInfo('Products.ExposedModules').declareP ublic('xmlrpclib') ModuleSecurityInfo('Products.ExposedModule.xmlrpclib') .declarePublic('Server ')
allow_module('Products.ExposedModules.xmlrpclib') security.declarePublic('Server')
from xmlrpclib import Server
allow_class(Server) #security.apply(globals())
here is my bloddy traceback: Error Type: Fault Error Value: <Fault 7: 'Can\'t evaluate the expression because the name "_guarded_reads" hasn\'t been defined.'>
Traceback (innermost last): File /home/runyaga/ZopeInstallation/Zope_software_home/lib/ python/ZPublisher/Publ ish.py, line 223, in publish_module File /home/runyaga/ZopeInstallation/Zope_software_home/lib/ python/ZPublisher/Publ ish.py, line 187, in publish File /home/runyaga/ZopeInstallation/Zope_software_home/lib/ python/Zope/__init__.p y, line 226, in zpublisher_exception_hook (Object: ApplicationDefaultPermissions) File /home/runyaga/ZopeInstallation/Zope_software_home/lib/ python/ZPublisher/Publ ish.py, line 171, in publish File /home/runyaga/ZopeInstallation/Zope_software_home/lib/ python/ZPublisher/mapp ly.py, line 160, in mapply (Object: getXML) File /home/runyaga/ZopeInstallation/Zope_software_home/lib/ python/ZPublisher/Publ ish.py, line 112, in call_object (Object: getXML) File /home/runyaga/ZopeInstallation/Zope_software_home/lib/ python/Shared/DC/Scrip ts/Bindings.py, line 324, in __call__ (Object: getXML) File /home/runyaga/ZopeInstallation/Zope_software_home/lib/ python/Shared/DC/Scrip ts/Bindings.py, line 354, in _bindAndExec (Object: getXML) File /home/runyaga/ZopeInstallation/Zope_software_home/lib/ python/Products/Python Scripts/PythonScript.py, line 359, in _exec (Object: getXML) (Info: ({'script': <PythonScript instance at 89a3a10>, 'context': <Application instance at 8a07f00>, 'container': <Application instance at 8a07f00>, 'traverse_subpath': []}, (), {}, None)) File Script (Python), line 3, in getXML (Object: guard) File /home/runyaga/ZopeInstallation/Zope_software_home/lib/ python/RestrictedPytho n/Guards.py, line 115, in guard File /home/runyaga/ZopeInstallation/Zope_software_home/lib/ python/Products/Expose dModules/xmlrpclib.py, line 547, in __call__ File /home/runyaga/ZopeInstallation/Zope_software_home/lib/ python/Products/Expose dModules/xmlrpclib.py, line 630, in __request File /home/runyaga/ZopeInstallation/Zope_software_home/lib/ python/Products/Expose dModules/xmlrpclib.py, line 585, in request File /home/runyaga/ZopeInstallation/Zope_software_home/lib/ python/Products/Expose dModules/xmlrpclib.py, line 601, in parse_response File /home/runyaga/ZopeInstallation/Zope_software_home/lib/ python/Products/Expose dModules/xmlrpclib.py, line 371, in close Fault: (see above)
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )