[Zope-dev] Zope 2.12 - supported Python versions

[Philipp von Weitershausen]

Hanno Schlichting wrote:
> Stephan Richter wrote:
>> On Wednesday 15 October 2008, Sidnei da Silva wrote:
>>> I don't want to rain on your parade, but I already did a first pass at
>>> reviewing the changes in Python 2.5 and Python 2.6. There are no
>>> significant changes that I could spot so far. Apparently the major
>>> changes are:
>> I also did a review for Python 2.5 a while ago...
> 
> So does this mean RestrictedPython just had a bad emotional status in
> the community, but it is actually well proven and reviewed now?

It has been reviewed by Jim for Python 2.4. When he did this, he wrote 
notes.txt which gives you a quick overview over the internals. The 
GSoC-sponsored efforts to port Zope 3 and Zope 2 to Python 2.5 included 
a review of RestrictedPython as well. As far as I can tell, the only 
changes to RestrictedPython were made by Sidnei a couple of days ago 
when he fixed it up for the new keywords in Python 2.6 and added some 
tests for features new in Python 2.5 and 2.6.

> I always was under the impression that Jim feared the code and the
> required security audit was perceived as a major painful undertaking.

It's certainly something that should be undertaken carefully. New 
syntactical features (such as the =+ operator in the past, or the 'with' 
statement or inplace 'if' now) have to be analyzed with respect to their 
bytecode. Bytecode changes have to be tracked as well.


It looks like Sidnei is on top of that already, though, which is 
certainly great to hear! Go Sidnei! :)