[Zope-CMF] Re: Getting started with CMF

Jens Vagelpohl jens at dataflake.org
Fri Nov 24 10:26:55 EST 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On 24 Nov 2006, at 16:22, Charlie Clark wrote:
> I was extrpolating from your previous post about the correct way to  
> do customisation:
>
> """Or, and this is the more complicated but "right" way to do it,  
> you create a filesystem product with a filesystem skin folders and  
> maintain your new main_template on the file system."""

It is true that the better way to store your customizations is in a  
filesystem skin. However, actions in the ZODB should *not* write back  
to the sile system. Granted, there are products that are made for  
that specific purpose (LocalFS etc), but allowing filesystem writes  
through the ZODB is a big security hole.

jens

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFFZw9ARAx5nvEhZLIRAowcAKC6aO6YfO3MxqviTxbURUHP13D3GgCeJk8V
podUAGpEHlUIluHbqh5xiJU=
=wgMm
-----END PGP SIGNATURE-----


More information about the Zope-CMF mailing list