[Zope] [announce] Local File System product
Jay, Dylan
djay@lucent.com
Wed, 27 Oct 1999 11:30:57 +1000
> -----Original Message-----
> From: Jonothan Farr [mailto:jfarr@real.com]
> Sent: Wednesday, October 27, 1999 04:13
> To: kent@goathill.org
> Cc: zope
> Subject: Re: [Zope] [announce] Local File System product
>
>
> > >What I was planning on doing for security was having an
> "access" file in
> > >the products directory that contained a list of
> directories and a list of
> > >the files (allowing wildcards) that you were allowed to
> access in _that_
> > >directory. It was going to default to only letting you
> read txt and log
> > >files in the product directory itself (defined by .).
> > >You could also add roles to this file.
> >
> > My 'file access' product creates Zope folders which correspond to
> > directories and other interesting objects. These Zope folders
> > can use the std zope acl_users (or whatever) and can also contain
> > methods and products in the Zope database specific to that
> > directory or file tree. This allows you to create different
> meta-data
> > for the same directories, depending on how they are accessed from
> > Zope (different subdir folders pointing at the same filesys path).
>
>
> That's closer to how I was planning to allow access control
> for specific
> directories and files. The problem with this approach is that
> I don't want
> to make the objects that represent directories or files in
> the local file
> system persistent Zope objects, which would be necessary to
> store access
> control data in the ZODB. I like the 'access' file approach
> for that reason,
> but I don't like the fact that it wouldn't be manageable
> throught the Zope
> interface. I honestly haven't come up with a really good solution yet.
Solution: Make the files/folder persistant but every request checks for the
existance of its filesystem counterpart. If its gone then it gets deleted.
Slow but it would work.