[Zope] Python scripts

Laurence Rowe l at lrowe.co.uk
Fri Jul 6 12:30:59 UTC 2012


On 6 July 2012 14:09, Richard Harley <richard at scholarpack.com> wrote:
> On Zope 2.10 is there a simple/universal way to only allow python scripts to
> be called by DTML methods or other python scripts and not directly TTW?

You can check that the script is not the published object with:

    if container.REQUEST['PUBLISHED'] is script:
        raise 'Forbidden'

For newer versions of Zope raise an exception object:

    from zExceptions import Forbidden
    if container.REQUEST['PUBLISHED'] is script:
        raise Forbidden('Script may not be published.')

Laurence


More information about the Zope mailing list