[Zope3-checkins] CVS: Zope3/src/zope/fssync - zsync.txt:1.2
Fred L. Drake, Jr.
fred at zope.com
Mon Aug 4 17:59:47 EDT 2003
Update of /cvs-repository/Zope3/src/zope/fssync
In directory cvs.zope.org:/tmp/cvs-serv12850
Modified Files:
zsync.txt
Log Message:
- started security notes
- added description for @@Zope/Root
=== Zope3/src/zope/fssync/zsync.txt 1.1 => 1.2 ===
--- Zope3/src/zope/fssync/zsync.txt:1.1 Mon Aug 4 14:39:15 2003
+++ Zope3/src/zope/fssync/zsync.txt Mon Aug 4 16:59:42 2003
@@ -160,6 +160,15 @@
The **update** command has no specific options.
+Security Notes
+--------------
+
+- The ``@@Zope/Root`` file contains the username and password with
+ which the checkout was made. Since this will typically allow access
+ with content management priviledges, this file should not be shared
+ carelessly.
+
+
Files
-----
@@ -212,6 +221,13 @@
A directory that contains a copy of the unmodified content data.
This is only present if there are non-container content objects in
the content directory.
+
+``Root``
+ File that gives the base URL for the checkout represented by the
+ filesystem representation. The URL must include the username and
+ password needed for authentication, so care must be taken in sharing
+ access to a checkout. This only exists in the ``@@Zope/`` directory
+ for the top-level checkout.
Reporting Bugs
More information about the Zope3-Checkins
mailing list