[Zope] to class or not to class?
Kevin Dangoor
kid@kendermedia.com
Wed, 19 Apr 2000 20:04:00 -0400
----- Original Message -----
From: "Marco Mariani" <m.mariani@imola.nettuno.it>
To: <zope@zope.org>
Sent: Wednesday, April 19, 2000 6:37 PM
Subject: [Zope] to class or not to class?
> 4) I need to ask my provider to let me install my own products
> (at a premium, of course, because it's a zope virtual server
> for me alone).
This is not necessarily the case... ZClass Products (and External Methods)
are not the same as Python Products... they install differently, and you may
be able to do this with your existing set up (depends on your provider).
> And again, sorry to bother you, but where can I understand the
> difference (and moral implications) between Python Methods and
> External Methods?
PythonMethods are written in python, but the code is interpreted with the
same security restrictions as DTML. The belief is that code edited through
the web should not be able to give people access to the machine or to
structures that would allow them to manipulate Zope's security mechanisms.
So, in DTML and PythonMethods you cannot write to files, do things like
foo['bar'] = 'baz', etc.
External Methods are unrestricted python, and can't be installed via the
web.
> I've read in the mailing list archive about some problems between
> Ext. Meth. and ZClasses, I can't find the post anymore. At the time,
> I didn't know that I needed ZClasses. Is there any truth?
I've read something about a problem with external methods and ZClasses as
well, but I don't know what the trouble is. You can do almost anything you
would need to with PythonMethods, though.
Kevin