Re: State of Plone web api
"David Glick (Plone)" <david.glick-z4DKO/[email protected]>
| Newsgroups | gmane.comp.web.zope.plone.devel |
|---|---|
| Message-ID | <[email protected]> |
On 1/16/14, 5:26 PM, Dylan Jay wrote: > On 17 Jan 2014, at 12:08 pm, David Glick (Plone) <david.glick-z4DKO/[email protected]> wrote: > >> On 1/16/14, 5:00 PM, Elizabeth Leddy wrote: >>> The most obvious question I have at this point is…. do people really need it that bad? I rarely set objects with an “api” in any framework, and if its needed I am usually wrapping like crazy to maintain certain behaviors and do extra… everything. GETting is obviously a win for ajax front ends but setting… I have my doubts. >>> >>> Please note I could be absolutely in a different boat on this - thats why I’m asking. Nothing troll-y intended. >>> >> I am working on a project currently with a PHP-based system. Fortunately it has a pretty good REST API, and I can get all the data imported into it by calling that from Python. Similarly, having a good REST API would provide a path for developers to get data into Plone even if Python isn't their preferred language. It would also provide a path for data to get updated in Plone in response to some event happening in some different system on another server. > What do you think of a REST api that lets you upload python expressions? Even if you didn't know python, you could at least cut and paste these from examples in developer documentation. It would solve the problem of having to write yet another api that is likely to not get maintained don't you think? > I think it's a bad idea. It's very likely to have security holes (as a member of the security team looking at the series of issues we've patched over the last few years, I don't trust restricted python), and it wouldn't be usable by people who don't know Python. David ------------------------------------------------------------------------------ CenturyLink Cloud: The Leader in Enterprise Cloud Services. Learn Why More Businesses Are Choosing CenturyLink Cloud For Critical Workloads, Development Environments & Everything In Between. Get a Quote or Start a Free Trial Today. http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk