Re: Re: userrights for localfs_command
Niels Dettenbach <[email protected]> Tue, 03 Apr 2012 14:19:06 +0200
| Newsgroups | gmane.comp.cms.zms.devel |
|---|---|
| Organization | Syndicat IT&Internet |
| Message-ID | <1741447.xG2QHjSuzR@gongo> |
--nextPart4090998.IWEgcxfRiM
Content-Type: multipart/alternative; boundary="nextPart1574971.i2irNbxDfK"
Content-Transfer-Encoding: 7Bit
--nextPart1574971.i2irNbxDfK
Content-Transfer-Encoding: 7Bit
Content-Type: text/plain; charset="iso-8859-1"
Am Dienstag, 3. April 2012, 09:21:58 schrieben Sie:
> what you did as well is giving a script all zope permissions available. This
> script is available for anybody in the web. With this script you access
> resources in your file system.
...shure it does - so it is very (!) important to know what the script does
and allows by theory and in practice...
> Zope has a lot of secure answers for that stuff. If you want to know, why
> this worked in ZMS a couple of months ago and what you really need to do,
> ask me. But I am not sure, if you need a quick fix or a secure solution for
> your customers.
Can you give some more details or examples? "a lot of " is really nothing more
then helpless to anyone here on the list...
cheers,
Niels.
--
---
Niels Dettenbach
Syndicat IT & Internet
http://www.syndicat.com
---
--nextPart1574971.i2irNbxDfK
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="iso-8859-1"
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" "http://www.w3.org/TR/REC-=
html40/strict.dtd">
<html><head><meta name=3D"qrichtext" content=3D"1" /><style type=3D"text/cs=
s">
p, li { white-space: pre-wrap; }
</style></head><body style=3D" font-family:'Arial'; font-size:8pt; font-wei=
ght:400; font-style:normal;">
<p style=3D" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-rig=
ht:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Am Dienstag=
, 3. April 2012, 09:21:58 schrieben Sie:</p>
<p style=3D" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-rig=
ht:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> what y=
ou did as well is giving a script all zope permissions available. This</p>
<p style=3D" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-rig=
ht:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> script=
is available for anybody in the web. With this script you access</p>
<p style=3D" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-rig=
ht:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> resour=
ces in your file system.=A0</p>
<p style=3D" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-rig=
ht:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">...shure it=
does - so it is very (!) important to know what the script does and allows=
by theory and in practice...</p>
<p style=3D"-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; ma=
rgin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; ">&nb=
sp;</p>
<p style=3D" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-rig=
ht:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=
=3D" font-size:15px; color:#1f1c1b; background-color:#ffffff;">> Zope ha=
s a lot of secure answers for that stuff. If you want to know, why </span><=
/p>
<p style=3D" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-rig=
ht:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=
=3D" font-size:15px; color:#1f1c1b; background-color:#ffffff;">> this wo=
rked in ZMS a couple of months ago and what you really need to do, </span><=
/p>
<p style=3D" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-rig=
ht:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=
=3D" font-size:15px; color:#1f1c1b; background-color:#ffffff;">> ask me.=
But I am not sure, if you need a quick fix or a secure solution for</span>=
</p>
<p style=3D" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-rig=
ht:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=
=3D" font-size:15px; color:#1f1c1b; background-color:#ffffff;">> your cu=
stomers.=A0</span></p>
<p style=3D"-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; ma=
rgin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; ">&nb=
sp;</p>
<p style=3D" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-rig=
ht:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=
=3D" font-size:15px; color:#1f1c1b; background-color:#ffffff;">Can you give=
some more details or examples? "a lot of " is really nothing mor=
e then helpless to anyone here on the list...</span></p>
<p style=3D"-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; ma=
rgin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; ">&nb=
sp;</p>
<p style=3D"-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; ma=
rgin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; ">&nb=
sp;</p>
<p style=3D" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-rig=
ht:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">cheers,</p>
<p style=3D"-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; ma=
rgin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; ">&nb=
sp;</p>
<p style=3D"-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; ma=
rgin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; ">&nb=
sp;</p>
<p style=3D" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-rig=
ht:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Niels.</p>
<p style=3D" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-rig=
ht:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">-- </p>
<p style=3D" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-rig=
ht:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"> ---</p>
<p style=3D" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-rig=
ht:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"> Niels Dett=
enbach</p>
<p style=3D" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-rig=
ht:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"> Syndicat I=
T & Internet</p>
<p style=3D" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-rig=
ht:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"> http://www=
.syndicat.com</p>
<p style=3D" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-rig=
ht:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"> ---</p>
<p style=3D" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-rig=
ht:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"> </p>
<p style=3D"-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; ma=
rgin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; ">&nb=
sp;</p>
<p style=3D"-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; ma=
rgin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; ">&nb=
sp;</p>
<p style=3D"-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; ma=
rgin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; ">&nb=
sp;</p>
<p style=3D"-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; ma=
rgin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; ">&nb=
sp;</p></body></html>
--nextPart1574971.i2irNbxDfK--
--nextPart4090998.IWEgcxfRiM
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (GNU/Linux)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=+RUm
-----END PGP SIGNATURE-----
--nextPart4090998.IWEgcxfRiM--