[Zope] Can't save Version in 2.6.1, please help!
Oliver Bleutgen
myzope@gmx.net
Wed, 21 May 2003 16:05:27 +0200
Troy Farrell wrote:
> What's bothersome is how it is not working. If versions are really a
> problem, they should be removed until they work and are not causing data
> loss. We shouldn't say that Zope can do versionning, but don't use it
> because you might loose data. Perhaps one of the versions gurus has
> some insight for us.
IANVG, but I can tell you that versions as implemented in zope (2.3.3)
are evil.
They are totally uncontrollable by permissions, since they just depend
on the client sending a certain cookie, without even checking if the
corespondending Version object even exists (text book example for the
violation of the "never trust the client" principle).
At least it was this way in 2.3.3, and I doubt anything has changed
since then.
Therefore, even if that database corruption bug is fixed, I'd like to
see at least the possibility to completly turn off the version
_functionality_ (i.e. said cookie is ignored instead of causing an
change of an object getting versioned).
cheers,
oliver