Restricted Access

[Maric Michaud]

Le mercredi 12 juillet 2006 08:17, iapain a écrit :
>
> I'm having currently working on OS/2 and Linux platform, I've designed
> a web based ide for python and i wish to restrict some commands

There is a restricted environment in Zope for TTW python scripts and 
ZPT/DTML .

These scripts are run in the Zope process in a very restricted environment 
which forbid the use of most builtins and allow the import of a limited list 
of modules.

Why don't use the RestrictedPython module from Zope (2.8 and up) and adapt it 
a bit. It seems loose coupled to the Zope internals (except for the 
multimapping class which is an extension class, but I doubt it's really a 
problem). It shouldn't be a too hard.

You'll need to make your own AccessControl/ZopeGuards.py-like module, and 
probably subclass the RestrictionMutator  to enable/disable certain 
functionnality (interdiction of names beginning by '_' for example is hard 
coded).
At last, you will get a simple example of the usage of the whole beast from 
your own interpreter in Products/PythonScripts.


> and 
> user can only access i.e rwx in his folder.
>

This should be possible by providing a wrapper function for file and open (see 
the Guards.py module).

IMO, it worth to be tried, and I don't see any other short-term, less hacky, 
solution.

regards,

-- 
_____________

Maric Michaud
_____________

Aristote - www.aristote.info
3 place des tapis
69004 Lyon
Tel: +33 426 880 097