l at lrowe
Jul 6, 2012, 5:30 AM
Post #2 of 2
(258 views)
Permalink
|
On 6 July 2012 14:09, Richard Harley <richard [at] scholarpack> wrote:
> On Zope 2.10 is there a simple/universal way to only allow python scripts to
> be called by DTML methods or other python scripts and not directly TTW?
You can check that the script is not the published object with:
if container.REQUEST['PUBLISHED'] is script:
raise 'Forbidden'
For newer versions of Zope raise an exception object:
from zExceptions import Forbidden
if container.REQUEST['PUBLISHED'] is script:
raise Forbidden('Script may not be published.')
Laurence
_______________________________________________
Zope maillist - Zope [at] zope
https://mail.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
https://mail.zope.org/mailman/listinfo/zope-announce
https://mail.zope.org/mailman/listinfo/zope-dev )
|
