[Zope] Zope Security Problem

Itamar Shtull-Trauring itamars@ibm.net
Sun, 29 Aug 1999 23:31:13 +0300


Kevin Dangoor wrote:

> So, anyone can look at the content of a Z SQL Method or a DTML Method (and
> maybe document). Is it possible to look at any arbitrary property? I've been
> working under the assumption that there was no way for someone to view a
> property unless you give them access via a method or the management
> screens...

I don't think you have to worry about this - I have no doubt that DC will
provide a fix in the next release, maybe even tommorow in CVS when they come
back to work. Right? ;)

-- 
Itamar - itamars@ibm.net
---------------------------o----------------------------------------------o
 Perl/Gimp Greeting Cards  | Trust? Ha! The US dollar is backed by ICBMs! |
 http://www.sealingwax.com |      --Anonymous Coward, Slashdot            |