Re: How are you ZPT users securing your interfaces?
Dieter Maurer <[email protected]>
| Newsgroups | gmane.comp.web.zope.page-templates |
|---|---|
| Message-ID | <[email protected]> |
Kevin Gill wrote at 2005-2-8 11:16 -0000: >I have used a site access method to prevent traversal of certain folders as >you suggested below. I reject IP's other than my office IP address. This is >a good security measure, and is much simpler than working access rights down >through all the scripts, methods etc that I use (possibly laziness). You are aware that AccessRules can be deactivated via specially constructed URLs? When you want to have real security via AccessRules, you will need to disable this feature (changing the code). -- Dieter