[Zope] Re: implicit vs. explicit ownership?

[Florent Guillaume]

Jürgen Herrmann wrote:
> in AccessControl.Owned.Owned:
> 
>     def manage_changeOwnershipType(explicit=1, RESPONSE=None, REQUEST=None):
>         """Change the type (implicit or explicit) of ownership.
>         """
> 
> can somebody please explain what's the difference between explicit
> and implicit here, or provide a rtfm hint?

Note that this is *executable* ownership, about which few people care 
(except those that develop code-like objects).
Read http://www.zope.org/Members/jim/ZopeSecurity/ServerSideTrojan for 
background.

Here the "implicit" or "explicit" executable ownership is just the fact that 
the _owner is acquired from the parent or explicitely set on the object.

Florent

-- 
Florent Guillaume, Nuxeo (Paris, France)   CTO, Director of R&D
+33 1 40 33 71 59   http://nuxeo.com   fg at nuxeo.com