[Grok-dev] grokcore.component 1.0 released!

[Philipp von Weitershausen]

On 1 May 2008, at 14:55 , David Pratt wrote:
> Hi Phillip, this looks interesting. Can you explain how this works  
> together with z3 security. Since multiadapters are part of the mix,  
> I am assuming this means everything is without any security on the  
> views as with regular Grok. I am willing to consider trying this out  
> a small project but my stumbling block is security. Many thanks.

grokcore.component is not about views. It's just about adapters, multi- 
adapters, utilites and event subscribers. Those components typically  
have no security associated with them (except for those so-called  
"trusted" adapters which occur very rarely).

Saying that views in regular Grok are "without any security" isn't  
true anyway. Views can be protected quite easily and effectively using  
security declarations in Grok. They're just public by default to make  
development in the beginning easy. But if you use regular Zope 3 plus  
grokcore.component rather than Grok, you won't get the public-by- 
default setting anyway.