[z3-five] Re: [z3-checkins] r5852 - in z3/Five/trunk: . demo/FiveViewsDemo tests tests/products/FiveTest

[Sidnei da Silva]

On Mon, Aug 02, 2004 at 11:43:07PM +0200, Martijn Faassen wrote:
| dreamcatcher at codespeak.net wrote:
| 
| [snip lots of great looking stuff]
| >- ViewPageTemplateFile 'modules' uses zope2 SecureModuleImporter now
| >  (eg: browser:page)
| 
| I'm a bit worried about this one. Aren't we dragging too much of Zope 
| page template security in here? After all, Five ZPTs are trusted, so 
| shouldn't we be able to import what we want?
| 
| I'm worried about introducing into Five lots of the cursing developers 
| typically do when messing around with security in Zope 2 untrusted code..

Dunno what you meant to say here. It looks to me that
SecureModuleImporter would be the right thing, as we can't deal with
z3's proxies yet. What are you suggesting?

-- 
Sidnei da Silva <sidnei at awkly.org>
http://awkly.org - dreamcatching :: making your dreams come true
http://www.enfoldsystems.com
http://plone.org/about/team#dreamcatcher

I'm all for computer dating, but I wouldn't want one to marry my sister.