[Zope] Zope product security question
Mon, 10 Mar 2003 16:39:31 -0500
On Mon, Mar 10, 2003 at 03:33:18PM -0600, Michael R. Schwab wrote:
> I've noted two different methods for declaring security in a class.
> The second method, which I believe to be the most recent,
> The second method seems to be the newest and most logical approach.
> The being exception that the default security access to 'deny' does
> not permit me to access attributes from my class that are basic Python
> types such as strings (e.g. meta_type from a DTML Method). I could
> declare the default security access to 'allow', but that seems
> inherently dangerous from a security standpoint.
I think what you're looking for is
__allow_access_to_unprotected_subobjects__ = 1
or, just make declarations on specific attributes:
self.meta_type = "blah"