<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><DIV>I don't know what this means. BTW, I'm using Zope 2.9.8, if that matters, along with Plone 2.5.4.<BR></DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"><BR>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"><FONT face=Tahoma size=2>
<HR SIZE=1>
<B><SPAN style="FONT-WEIGHT: bold">From:</SPAN></B> Andreas Jung <lists@zopyx.com><BR><B><SPAN style="FONT-WEIGHT: bold">To:</SPAN></B> Pedro LaWrench <pedrolawrench@yahoo.com><BR><B><SPAN style="FONT-WEIGHT: bold">Cc:</SPAN></B> zope@zope.org<BR><B><SPAN style="FONT-WEIGHT: bold">Sent:</SPAN></B> Tuesday, April 28, 2009 8:09:14 AM<BR><B><SPAN style="FONT-WEIGHT: bold">Subject:</SPAN></B> Re: [Zope] how to prevent URL access to an external method?<BR></FONT><BR>Use a BrowserView?!<BR><BR>-aj<BR><BR>
<DIV class=gmail_quote>On Tue, Apr 28, 2009 at 17:04, Pedro LaWrench <SPAN dir=ltr><<A href="mailto:pedrolawrench@yahoo.com" target=_blank rel=nofollow ymailto="mailto:pedrolawrench@yahoo.com">pedrolawrench@yahoo.com</A>></SPAN> wrote:<BR>
<BLOCKQUOTE class=gmail_quote style="PADDING-LEFT: 1ex; MARGIN: 0pt 0pt 0pt 0.8ex; BORDER-LEFT: rgb(204,204,204) 1px solid"><BR>I need to do something on the filesystem, which requires unrestricted python, so I created an external method. The problem is that anyone can call that directly via URL, so I added a permission check. Even then, users with the sufficient permissions can call this via URL, which I don't want them to do. I only want them to have access indirectly from other pages (such as a page template that will pass sane parameters). Is there anyway to do this?<BR> <BR>Thanks,<BR>PL<BR><BR><BR><BR>_______________________________________________<BR>Zope maillist - <A href="mailto:Zope@zope.org" target=_blank rel=nofollow ymailto="mailto:Zope@zope.org">Zope@zope.org</A><BR>http://mail.zope.org/mailman/listinfo/zope<BR>** No cross posts or HTML encoding! **<BR>(Related lists
-<BR> http://mail.zope.org/mailman/listinfo/zope-announce<BR> http://mail.zope.org/mailman/listinfo/zope-dev )<BR></BLOCKQUOTE></DIV><BR>
<STYLE></STYLE>
</DIV></DIV></div><br>
</body></html>