[Zope] Python Classes and Zope.

[Jean-Marc Orliaguet]

Paul Winkler wrote:

>On Thu, Dec 01, 2005 at 09:04:11PM +0100, Jean-Marc Orliaguet wrote:
>  
>
>>You need to call InitializeClass on your object, and that's it.
>>
>>cf http://www.upfrontsystems.co.za/courses/zope/ch04.html
>>
>>under "Zopifying our Python classes"
>>    
>>
>
>initializeClass() only helps if the class you feed it
>inherits from Acquisition.Implicit or Acquisition.Explicit,
>and has some security declarations in it.
>
>  
>

for protected methods, but what if your methods are public?

http://www.zope.org/Wikis/DevSite/Projects/DeclarativeSecurity/ZopeSecurityForDevelopers/wikipage_view

------------------------
- It is important to note what can and cannot be protected using the 
|SecurityInfo| interface. First, the security policy relies on 
/Acquisition/ to aggregate access control information, so any class that 
needs to work in the security policy must have either 
|Acquisition.Implicit| or |Acquisition.Explicit| in its base class 
hierarchy.

- if the object has a security assertion that it is /public/ then access 
will be granted
------------------------

does zope2 do an access control based on acquisition for public methods, 
that would be a waste of resources since the answer is always "yes, 
granted" ?

/JM