[Zope] External / Internal Methods

julian@zereau.net julian@zereau.net
Mon, 01 Mar 1999 10:16:18 -0000 (GMT)


On 26-Feb-99 Michael Bernstein wrote:
> "Christopher G. Petrilli" wrote:
>> 
>> I vaguely recall this being discussed in the past, but I can't find it
>> in my archives...
>> 
>> Has anyone tried to make a comparable thing to an "External Method" but
>> that is contained in the database itself?
> 
> I believe that this was rejected by DC because of security issues.
> Letting people store and run Python code directly in the database is
> essentially the same as giving someone complete access to the system.

Does python have anything equivalent to Perl's taint mode? Because if it does
then this could be used. That and restricting allowable APIs from internal
methods - again, if this is possible.

---
Julian Morrison
Programmer (Zereau Ltd)