Added a security declaration for the handy DirectResult.

zopefoundation · Dec 20, 2005 · 6bdf133 · 6bdf133
commit 6bdf133
Showing 1 changed file with 21 additions and 0 deletions.
diff --git a/http.zcml b/http.zcml
@@ -0,0 +1,21 @@
+<configure
+   xmlns="http://namespaces.zope.org/zope"
+   package="zope.publisher.http">
+
+  <content class="zope.publisher.http.HTTPRequest">
+    <require
+        permission="zope.View"
+        interface="zope.publisher.interfaces.http.IHTTPApplicationRequest"/>
+  </content>
+
+  <content class="zope.publisher.http.URLGetter">
+    <require
+        permission="zope.View" 
+        attributes="get __getitem__ __str__" />
+  </content>
+
+  <class class="zope.publisher.http.DirectResult">
+    <allow interface="zope.publisher.interfaces.http.IResult" />
+  </class>
+
+</configure>