[Zope-dev] Security problems importing from python package.

Chris Withers chrisw@nipltd.com
Mon, 25 Nov 2002 16:33:51 +0000


Clemens Robbenhaar wrote:
>  If one tries to import the code from a python script, the security
> machinery first check, if the module has some security info, and imports
> it afterwards, if the info is found. But as the module is not imported
> anyway, it is not initialized, and has not such info and thus will not
> be allowed for import. 

This is a very helpful analysis. I've updated the collector issue:
http://collector.zope.org/Zope/685

Does anyone have an idea of the correct way to fix this?

cheers,

Chris