[Zope-dev] python 1.6, ZPublisher

Toby Dickenson tdickenson@geminidataloggers.com
Mon, 24 Jan 2000 12:06:16 +0000


I understand that python 1.6 adds methods to string objects. Does this
have implications for access control in ZPublisher?

I guess that it will be possible to use something like
http://localhost/object/private_string_attribute/uppercase to snoop
into attributes that are not published if using python 1.5.x

(Yes, I know python 1.6 isnt supported for Zope today. I'm mentioning
it because it's an interesting issue)



Toby Dickenson
tdickenson@geminidataloggers.com