[Zope] Is there any way to turn off the publishing of externalmethods to the web in Zope?

[Jonathan]

----- Original Message ----- 
From: "Mark, Jonathan (Integic)" <jonathan.mark at integic-hc.com>
To: <zope at zope.org>
Sent: Friday, January 26, 2007 10:29 AM
Subject: [Zope] Is there any way to turn off the publishing of 
externalmethods to the web in Zope?


>I have an external method which uses eval(). I would like to prevent anyone 
>from calling this method from inside a URL, e.g., 
>myzopesite/myexternalmethod?myvar=deletemyfiles()
>
> Rather, I wish for only Zope objects such as Python Scripts to be able to 
> call this external method. Is there any way to turn off the publishing of 
> external methods to the web in Zope?


In your external method you could put something like:

if string.find(self.REQUEST['ACTUAL_URL'], 'ExtMethodName') != -1:
                return self.REQUEST.RESPONSE.redirect('BadUserURL')


hth

Jonathan (another one)