[Zope] ExternalMethod - add new parameter

JPenny at ykksnap-america.com JPenny at ykksnap-america.com
Tue Apr 8 10:04:41 EDT 2008


Zope itself should not be running as root.  The external method will run 
as
whatever user zope is running as.

If you insist on doing this kind of thing, which is a pretty bad idea, 
then
use os.system(...) or one of the popen(...) commands to call another 
program
that you have permitted root access by a somewhat controlled process,
such as sudo.  At least then, you will have a log of changes (unless you 
make
a security mistake and the log can itself be altered).

jim penny 




Chris Withers <chris at simplistix.co.uk> 
Sent by: zope-bounces at zope.org
04/08/2008 09:52 AM

To
rishi pathak <mailmaverick666 at gmail.com>
cc
Dieter Maurer <dieter at handshake.de>, zope at zope.org
Subject
Re: [Zope] ExternalMethod - add new parameter






rishi pathak wrote:
>              I dont have a need to run all the external method as root, 
only
> some of them. 

You seem to be carefully ignoring the fact that Dieter is pointing out 
that this isn't possible ;-)

Chris

-- 
Simplistix - Content Management, Zope & Python Consulting
            - http://www.simplistix.co.uk
_______________________________________________
Zope maillist  -  Zope at zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )




More information about the Zope mailing list