[Python-3000] Will we have a true restricted exec environment for python-3000?

[Greg Ewing]

Georg Brandl wrote:

> Even as properties and methods, they can be restricted,
 > like func_code is now.

Yes, but that means special-casing all the attribute
accessors for them, and being careful to maintain the
code which enforces the restrictions.

If they're functions, the restriction is implemented
by simply excluding them from the __builtins__.

Another way of looking at it is that I'm suggesting
a more capability-oriented way of handling this --
whether you can do something depends on whether you
have access to a function or object that does it.

--
Greg