Is this the way to allow that a python script can only be called internally, not directly from the web ? if container.REQUEST.PUBLISHED != script: My code I know there is also the LockableFolder, but in this case I can't use it (because I am in another kind of folder)