How to give content maangers ability to update a Zope site ?
How would you give a content manager the ability to update a live Zope site ? What I have is an in-house development site with various folders and each folder has a manager. I thought I would be able to let them use FTP on port 8021 to unload objects from the development site and update a live site on the 'net. However it seems that FTP can only unload DTML documents and methods and can't unload SQL Methods, ACL User Folders or Database Connection Methods. Plan B was to use the export facility but they would then need to have telnet access to the Zope import directory in order to put the .zexp file there, which seems a huge security gap to me. Am I missing something obvious, how would you do it ? Thanks Richard Moon richard@dcs.co.uk
richard@dcs.co.uk wrote:
Plan B was to use the export facility but they would then need to have telnet access to the Zope import directory in order to put the .zexp file there, which seems a huge security gap to me.
I set up ncftp to allow ftp uploads (but not erasures or the creation of new directories) to the import directory as a special user (i.e. one ftp user for all managers). Then people can import those files into zope wherever they have permisssion. A cron job wipes out the imported files every night. Hope that helps, ~mindlace
participants (2)
-
ethan mindlace fremen -
Richard Moon