[Zope] Script Security

Dieter Maurer dieter at handshake.de
Wed Sep 15 15:08:25 EDT 2004


Jason Leach wrote at 2004-9-14 15:42 -0700:
>Is it possible to have a script that can not be called by users:
>http://www.foo.com/myscript but can be called by other scripts?

You could add to your script:

  if container.REQUEST['PUBLISHED'] == script:
    # the script was called directly via the Web
    raise 'Unauthorized'

I think that I also saw another solution in the mailing list
but do not remember the details. Your must search for it.

-- 
Dieter


More information about the Zope mailing list