Re: [Zope] extensions (.html .gif), security, and multilanguage sites
CARL ROBERT BLESIUS writes:
- file extensions... will we have problems programming with python if we use extensions (e.g. index.html melanoma.jpg) in Zope 2.3 or is there a way around it? We do not want to confuse users (index_html!?). Objects with such ids are more difficult to access in Python (not DTML) as the '.' is invalid in Python names.
You cannot use "Attribute Access Syntax" (i.e. object.attribute) but need to use a function for access. You will not use any functionality but your code will look a bit uglier.
- the sites we are building will be multilingual answered by someone else...
A ZClass with customized DTML Documents and DTML Methods which have special properties? The properties that come to mind at the moment are: - Language - Template (According to branch of site and language) - Author - Author email - Publish (Yes or No) It is no problem to give the ZClass these additional properties. It is no problem, too, to give it to DTML Documents; DTML Methods, however, are no property managers.
One concern for example is the multilingualism of breadcrumbs and site maps (we want them to be dynamically generated). I can not give you a solution by now.
We want to explore this (and other automatic web grafic generation) in a diploma thesis, starting later this year. We will look into PIL (Python Image Library), ZGDChart and Corel automation. If you find a solution, please let me know.
-Security - any tips on security? When using the tree function for example how do I prevent certain folders from being listed? What is important when running zope as far as security goes? Where do I watch for security problems with zope? It would be very weak, if you protect sensitive folders just be not displaying them!
Use Zope security to restrict access to sensitive objects. The "dtml-tree" has an attribute "skip_unauthorized" that lets you display just the parts of the structure that the current visitor has access rights to.
Anyone have good ideas or experience? We are building a multi-lingual site.
I think, you can go ahead with Zope into this area.
P.S. Are there any qualified Zopitistas out there who would be willing to answer questions like the ones above and provide some practical suggestions This list is great for general (in contrast to very project specific) questions.
I would expect, the project specific consultancy will cost something. Dieter
participants (1)
-
Dieter Maurer