Re: Meeting agenda bot, website, git, ssh

From: Wichert Akkerman <wichert(at)wiggy(dot)net>
To: Ian Jackson <ijackson(at)chiark(dot)greenend(dot)org(dot)uk>
Cc: spi-general(at)lists(dot)spi-inc(dot)org
Subject: Re: Meeting agenda bot, website, git, ssh
Date: 2009-02-05 18:43:40
Views: Raw Message | Whole Thread | Download mbox
Lists: spi-general

Previously Ian Jackson wrote:
> For example, people who need to edit web pages do not need to be able
> to run code on the server. I assume (perhaps over-optimistically)
> that whatever CMS(s) we are using do not permit the author of the page
> data to execute code on the server.

THe current CMS (Plone) most certainly does not allow that. Normal users
are not allowed to create any python code. Managers are allowed to
create python scripts via a web interface, but they are executed in a
restricted environment which does not allow any filesystem access, nor
anything else that might be a security risk.


Wichert Akkerman <wichert(at)wiggy(dot)net> It is simple to make things. It is hard to make things simple.

Browse spi-general by date

  From Date Subject
Next Message MJ Ray 2009-02-12 10:36:06 Meeting log for 2009-02-11
Previous Message Jimmy Kaplowitz 2009-02-04 03:40:41 Re: Video card drivers for windows xp sony Vaio