10 Jun
2005
10 Jun
'05
6:31 p.m.
Paul Winkler wrote at 2005-6-9 15:42 -0400:
...
ModuleSecurityInfo('Products.FooProduct').declarePublic( 'blah', 'foo')
This allows something like:
from Products.FooProduct import foo
But, in fact, you use
from Products.FooProduct import Utils ... Utils.foo ...
Strange, that it worked at all...
Yeah, I think I just happened to hit on some undocumented behavior that *mostly* works.
Maybe, you should file a bug report: Undocumented security related features might be viewed as security holes... Especially, if something unexpectedly becomes possible... However, I think, this one in not overly critical. -- Dieter