Hello ! I want to protect my Zope files, and objects from anybody to see them, or get the structure of my site. The problem is that: The site is like this: root index_html folder1 > many subobjects folder2 > many subobjects folder3 > many subobjects folderN > many subobjects I want to handle all of the requests with one file, the index_html. So: http://root or http://root/index_html is valid, every other request is invalid. Because the site have many objects, I use subfolders to separate them. But I don't want to anybody stranger see these folders, or the objects in in. Now if I write this: http://root/folder1 then the Zope don't drop an error message, but search for the root's index_html, and load it. It is not too good for me. Or it is trying: http://%root%/MS_BuildLeftMenu // this is an zpt object, a subcomp and the Zope is evaluate this object for the outer request. So: Have the Zope an object property what prevent these effects ? I want to create perfect handled site, and I don't want to anybody access subcomponents/subobjects/subresults, and get the site structure or an information about working methods. I want to use this site with one public main script, what call the subobjects that hided from the outer requests. How can I do that ? Thanx: KK -- Best regards, fowlertrainer mailto:fowlertrainer@anonym.hu
fowlertrainer@anonym.hu said:
The site is like this:
root index_html folder1 > many subobjects folder2 > many subobjects folder3 > many subobjects folderN > many subobjects
I want to handle all of the requests with one file, the index_html.
So: http://root or http://root/index_html
is valid, every other request is invalid.
I'll reserve comment on whether this is a good idea... but it should be easy with Apache. Allow requests that match the pattern and deny those that don't. If you really *must* have a pure Zope solution, you'll need an access rule. If you must do this, be sure to read the documentation twice and take special note of how to get back into your server after you lock yourself out and/or hose the ZMI. HTH, Dylan
participants (2)
-
Dylan Reinhardt -
fowlertrainerļ¼ anonym.hu