[IronPython] restrict scripting access

[Rainer Worbis]

But i can't restrict the user from adding any assemblies he want (since the assemblies are in the project or gac)

 

Rainer 

 

Von: users-bounces at lists.ironpython.com [mailto:users-bounces at lists.ironpython.com] Im Auftrag von Dody Gunawinata
Gesendet: Montag, 30. Juni 2008 14:25
An: Discussion of IronPython
Betreff: Re: [IronPython] restrict scripting access

 

In the IronPython hosting API, unless you specifically load the assembly, it will not be accessible through the script. So right now restricting access means configuring the assemblies you want to expose to the script.

On Mon, Jun 30, 2008 at 3:09 PM, Ben Hall <ben2004uk at googlemail.com> wrote:

I thought this last night, it would be really useful if we could
'sandbox' the IP engine and limit it's access to certain areas of the
framework.




On Mon, Jun 30, 2008 at 12:57 PM, Rainer Worbis <r.worbis at cubido.at> wrote:
> No - for example i would like to prevent that the user loads assemblies and does own data access via System.Data.SqlClient.
> Or uses specific parts of the applications. (which should be visible to other scripts). So access control per script would be optimal.
>
> Rainer
>
> -----Ursprüngliche Nachricht-----
> Von: users-bounces at lists.ironpython.com [mailto:users-bounces at lists.ironpython.com] Im Auftrag von Korbinian Abenthum
> Gesendet: Montag, 30. Juni 2008 13:47
> An: Discussion of IronPython
> Betreff: Re: [IronPython] restrict scripting access
>
> Rainer Worbis wrote:
>> is there a way to restrict access to objects or namespaces
>> within a script? We use IronPython for providing scripting
>> functionality within our .NET Application but would like to
>> restrict access to certain functions. Has anybody information
>> or a sample how to do that?
>
> Can you declare the restricted objects as "internal"?
>
> Cheers,
>  Korbinian
> _______________________________________________
> Users mailing list
> Users at lists.ironpython.com
> http://lists.ironpython.com/listinfo.cgi/users-ironpython.com
> _______________________________________________
> Users mailing list
> Users at lists.ironpython.com
> http://lists.ironpython.com/listinfo.cgi/users-ironpython.com
>
_______________________________________________
Users mailing list
Users at lists.ironpython.com
http://lists.ironpython.com/listinfo.cgi/users-ironpython.com




-- 
nomadlife.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/ironpython-users/attachments/20080630/716c6c85/attachment.html>