[Zope3-dev] Zope3 comments and questions.
Chris Withers
chrisw@nipltd.com
Tue, 11 Dec 2001 18:16:17 +0000
Jim Fulton wrote:
>
> Chris Withers wrote:
> >
> > Yeah, but what do I do if I want the edit method
>
> You mean the update method.
yup
> You can protect the methods directly. You don't *have* to use an interface.
> If you feel you must use interfaces to make security assertions, then you
> will need to factor the inerfaces so that they don't overlap. For example, the
> IContactEdit interface could be factored so that it extended IContactInfo and
> IContactUpdate, where IContactUpdate provided only the update method. Then you
> could use IContactUpdate in your security assertion.
Ah, okay, so, in short, from my point of view, don't use interfaces to make
security assertions ;-)
(do Zope 3 internals use interfaces to make security assertions?)
> Not. _setName resulted from a detail in the ways that File-system DTML methods
> did attribute lookup.
>
> There won't be any hint of that in Zope 3.
:-)
Chris