[Zope-dev] SiteAccess 2 Questions

[Chris Withers]

Hi,

Here's a load of questions that have sprung up as a result of trying to
get to grips with SiteAccess 2 on Zope 2.2.1:

It looks like REQUEST.steps is the replacement for PARENTS?
Is that so?

Small grumble:
REQUEST['TraversalRequestNameStack'] is a bit of a long-winded name :P

> If an Access Rule is broken, and is preventing normal access, it can 
> be disabled by restarting Zope with
> environment variable SUPPRESS_ACCESSRULE set.

So now you have to restart Zope to undo a screwup? 
I guess __no_before_traverse__, or whatever it was, was a security
whole, or something?

Hmm, the example for Multiple Sites isn't very robust :-(
http://www.zope.org/Members/4am/SiteAccess2/vhosting

You use HTTP_HOST, without ensuring it exists. I remember having
problems with this in Zope 2.1.6 as HTTP_HOST doesn't exist when you
access things via FTP, so an error gets thrown, effectively preventing
you from accessing any objects covered by the access rule through FTP.

My solution for this is just to wrap the rule in <dtml-if
"REQUEST.has_key('HTTP_HOST')">

Well, that's all for now...

cheers,

Chris