On 13.09.2007, at 18:07, Roger Ineichen wrote:

Hi

Betreff: [Zope3-dev] Re: skin support for xmlrpc


On 13.09.2007, at 17:28, Philipp von Weitershausen wrote:

Christian Theune wrote:
Let me propose a change:
1. We revert the change.

Any news on this?

Yes. Over the last few days I pondered about how to do it
without xmlrpc layers. But there doesn't seem to be a way
nice and easy  way.
So I will need to implement the layer support in a different
package.
The revert will be done till monday, maybe already tomorrow.
Sorry for the delay.

Anyway, could somebody who had an error with that tell me
what the problem was? I just heard "we had a problem".

Why revert? We need layers in every kind of context, request
adapter registration because it's the concept which permission
get registered in different projects on a single server sharing
packages.

The problem is simple, XML-RPC has used the IBrowserRequest
and now it uses the IXMLRPCRequest. This is why the XML-RPC
views in different projects don't work anymore. This means
the XML-RPC uses a browser request which is bad because it
enables the views everywhere.

No no. XML-RPC did use IXMLRPCRequest before. All I added was the IXMLRPCSkinType which did not exist.

What I also changed is the ++skin++ traverser which was registered for "*" instead of IBrowserRequest. But I consider the old behaviour a bug since skins were only valid with IBrowserRequest.



The solution is to provide the request interface which was the
default before the changes.

But don't take the option way to use other request interface then
the default for registration.

I'll need it. Because I'll take care on security and don't like
to register everything on whatever.

Before I'll revert the layer-support will be there in a third party package, probably using ++api++.


--
Christian Zagrodnick

gocept gmbh & co. kg  ·  forsterstrasse 29 · 06112 halle/saale
www.gocept.com · fon. +49 345 12298894 · fax. +49 345 12298891


Attachment: PGP.sig
Description: This is a digitally signed message part

_______________________________________________
Zope3-dev mailing list
Zope3-dev@zope.org
Unsub: http://mail.zope.org/mailman/options/zope3-dev/archive%40mail-archive.com

Reply via email to