| From: | Wichert Akkerman <wichert(at)wiggy(dot)net> |
|---|---|
| To: | Ian Jackson <ijackson(at)chiark(dot)greenend(dot)org(dot)uk> |
| Cc: | spi-general(at)lists(dot)spi-inc(dot)org |
| Subject: | Re: Meeting agenda bot, website, git, ssh |
| Date: | 2009-02-05 18:43:40 |
| Message-ID: | 20090205184340.GA25109@wiggy.net |
| Views: | Raw Message | Whole Thread | Download mbox |
| Thread: | |
| Lists: | spi-general |
Previously Ian Jackson wrote:
> For example, people who need to edit web pages do not need to be able
> to run code on the server. I assume (perhaps over-optimistically)
> that whatever CMS(s) we are using do not permit the author of the page
> data to execute code on the server.
>
THe current CMS (Plone) most certainly does not allow that. Normal users
are not allowed to create any python code. Managers are allowed to
create python scripts via a web interface, but they are executed in a
restricted environment which does not allow any filesystem access, nor
anything else that might be a security risk.
Wichert.
--
Wichert Akkerman <wichert(at)wiggy(dot)net> It is simple to make things.
http://www.wiggy.net/ It is hard to make things simple.
| From | Date | Subject | |
|---|---|---|---|
| Next Message | MJ Ray | 2009-02-12 10:36:06 | Meeting log for 2009-02-11 |
| Previous Message | Jimmy Kaplowitz | 2009-02-04 03:40:41 | Re: Video card drivers for windows xp sony Vaio |