[Zope] Idiom for accessing restricted capabilities

Toby Dickenson tdickenson@geminidataloggers.com
Fri, 27 Dec 2002 16:06:09 +0000


On Thursday 26 December 2002 11:46 pm, Andrew Athan wrote:

> Now, say I want to invoke purchase() from an ExternalMethod that is
> called from an anonymous context, what's the preferred way of setting
> and supplying the appropriate credentials?

ExternalMethod doesnt have a GUI for setting proxy roles. As you know,=20
ExternalMethods run without any protection, therefore they can contain *c=
ode*=20
that sets proxy roles.=20


--=20
Toby Dickenson
http://www.geminidataloggers.com/people/tdickenson