[Checkins] SVN: Products.SQLAlchemyDA/trunk/__init__.py allow access to some SA classes from within untrusted code

Andreas Jung andreas at andreas-jung.com
Mon Apr 30 07:19:42 EDT 2007


Log message for revision 74922:
  allow access to some SA classes from within untrusted code
  

Changed:
  U   Products.SQLAlchemyDA/trunk/__init__.py

-=-
Modified: Products.SQLAlchemyDA/trunk/__init__.py
===================================================================
--- Products.SQLAlchemyDA/trunk/__init__.py	2007-04-30 11:15:23 UTC (rev 74921)
+++ Products.SQLAlchemyDA/trunk/__init__.py	2007-04-30 11:19:42 UTC (rev 74922)
@@ -23,5 +23,14 @@
                           constructors=(manage_addSAWrapperForm, 
                                         manage_addSAWrapper),
                           permission=ADD_SA_WRAPPER_PERMISSION)                          
-        
-  
+
+
+    # make sqlalchemy classes available to untrusted code
+    from AccessControl.SecurityInfo import ModuleSecurityInfo, allow_module, allow_class
+
+    from sqlalchemy.orm.session import Session
+    from sqlalchemy.orm.query import Query
+
+    allow_class(Session)
+    allow_class(Query)
+



More information about the Checkins mailing list