[Zope] Python Script Security

[Brian R Brinegar]

Rich,

You can modify the permissions on each of your python scripts to require some role, say "gatekeeper" and then proxy your front-end script to have the role "gatekeeper". Then, only users or scripts with the role "gatekeeper" can call the script directly.

Brian Brinegar
Purdue University

----- Original Message -----
From: "Richard Harley" <richard at scholarpack.com>
To: zope at zope.org
Sent: Friday, November 18, 2011 1:05:27 PM
Subject: [Zope] Python Script Security

Hello all

I have a dtml method which builds a page from various different python 
scripts.
How can I stop the python scripts from being called and passed variables 
independently of the main dtml method? I've tried some research on proxy 
roles but couldn't pin it down.  ZSQL methods are not callable 
independently and I would like Python Scripts to behave the same.
TIA
Rich
_______________________________________________
Zope maillist  -  Zope at zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )