<br>HI<br><br>Big +1 from me on this.<br>I had to do a whole lot of hacks to get this stuff running on app engine and basically<br>had to gut zope.proxy which was ugly and obviously unsupported.<br>After getting this running which was a big task I decided to go with repoze.bfg which <br>
just didn't have the security proxies at all because I wouldn't have to support my wierd gutted<br>fork of zope.proxy and zope.security. (under gae I am not running any untrusted code)<br><br>Having a standard way to turn this stuff would be great, <br>
<br>Rgds<br><br>Tim<br><br><br><div class="gmail_quote">On Mon, Jun 22, 2009 at 5:36 PM, Jim Fulton <span dir="ltr"><<a href="mailto:jim@zope.com">jim@zope.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<br>
On Jun 21, 2009, at 9:40 PM, Stephan Richter wrote:<br>
<br>
> On Sunday 21 June 2009, Jim Fulton wrote:<br>
>> Thoughts?<br>
><br>
> +1. Sounds really good!<br>
><br>
> BTW, I would love to hear about a practical example for overriding<br>
> proxy()<br>
> other than turning off security altogether.<br>
<br>
<br>
2 examples:<br>
<br>
- Use a Python-based proxy that's good enough for supporting access<br>
control in trusted code. (It wouldn't protect against devious<br>
untrusted code, but most applications don't really need to run<br>
untrusted code.)<br>
<br>
- Use a better system for managing checkers.<br>
<br>
Probably the most important feature is disabling proxy-based<br>
protection for applications that don't need an access control model or<br>
that use a non-proxy-based approach.<br>
<br>
Jim<br>
<br>
--<br>
Jim Fulton<br>
Zope Corporation<br>
<br>
<br>
_______________________________________________<br>
Zope-Dev maillist - <a href="mailto:Zope-Dev@zope.org">Zope-Dev@zope.org</a><br>
<a href="http://mail.zope.org/mailman/listinfo/zope-dev" target="_blank">http://mail.zope.org/mailman/listinfo/zope-dev</a><br>
** No cross posts or HTML encoding! **<br>
(Related lists -<br>
<a href="http://mail.zope.org/mailman/listinfo/zope-announce" target="_blank">http://mail.zope.org/mailman/listinfo/zope-announce</a><br>
<a href="http://mail.zope.org/mailman/listinfo/zope" target="_blank">http://mail.zope.org/mailman/listinfo/zope</a> )<br>
</blockquote></div><br>