[Zope] Authorization problem with python module

Andreas Jung lists at andreas-jung.com
Thu Feb 3 01:09:45 EST 2005



--On Mittwoch, 2. Februar 2005 22:11 Uhr -0500 Etienne Desgagné 
<etienne.desgagne.1 at ulaval.ca> wrote:

> Hi Everyone,
>
>    I have a security problem with a python script in Zope (2.7.0). I try
> to import a not very common python module to use some of is method in my
> script.
>
> In the _init_.py of the product that use this module, I have checked if
> "allow_module" and "allow_class" is correctly set ans all seems to be ok.
> The problem is when I use one of the method of a class of that module in
> my script, a message box appear asking for my login and password and if I
> write my user name and password (manager) it doesn't work.

allow_module() and allow_class() are *not* designed to work for all and 
everything!
If this stuff does not work, use ExternalMethods, filesystem code or 
TrustedExecutables by DM.

-aj


More information about the Zope mailing list