[Zope3-dev] Zope3 comments and questions.

Chris Withers chrisw@nipltd.com
Tue, 11 Dec 2001 18:16:17 +0000


Jim Fulton wrote:
> 
> Chris Withers wrote:
> >
> > Yeah, but what do I do if I want the edit method
> 
> You mean the update method.

yup

> You can protect the methods directly. You don't *have* to use an interface.
> If you feel you must use interfaces to make security assertions, then you
> will need to factor the inerfaces so that they don't overlap. For example, the
> IContactEdit interface could be factored so that it extended IContactInfo and
> IContactUpdate, where IContactUpdate provided only the update method. Then you
> could use IContactUpdate in your security assertion.

Ah, okay, so, in short, from my point of view, don't use interfaces to make
security assertions ;-)
(do Zope 3 internals use interfaces to make security assertions?)

> Not. _setName resulted from a detail in the ways that File-system DTML methods
> did attribute lookup.
> 
> There won't be any hint of that in Zope 3.

:-)

Chris