{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security/2"}],"enrichment":{"capability":"AccessControl provides a security framework for Zope that enforces access control and authorization rules through guarded attribute access and role-based permission checking.","skillfed_tags":["zope-framework","authorization"],"use_cases":["Enforce role-based access control in Zope-based web applications where different users need different permissions to view or modify objects.","Prevent untrusted code or user-supplied scripts from accessing sensitive attributes or methods through guarded attribute validation.","Define and manage hierarchical permission and role systems across complex object graphs in Zope content management systems.","Restrict access to built-in methods and attributes on basic types (strings, bytes, ranges) to prevent information leakage in restricted execution contexts."],"what_it_does":"AccessControl is a security framework for Zope that enforces fine-grained access control through guarded attribute access, role-based permissions, and authorization checks. It sits between application code and object attributes, validating whether a user has permission to access or modify data based on declared roles and security policies. The package provides both Python and C implementations of core security functions (like guarded_getattr), with the C version used by default for performance.\n\nThe framework integrates deeply with Zope's object model through Acquisition and ExtensionClass, allowing security declarations to be inherited and composed across object hierarchies. It manages user folders, role definitions, permission mappings, and restricted code execution (via RestrictedPython). Recent versions have addressed parity issues between Python and C implementations and fixed information-disclosure vulnerabilities in string formatting and UserFolder data access.","worth_installing":"Yes, if you are building or maintaining a Zope application. AccessControl is the standard security framework for Zope and is actively maintained with recent security fixes. The 17 runtime dependencies are expected in a Zope environment. No known vulnerabilities as of the fact sheet. Not recommended outside Zope ecosystems\u2014it is tightly coupled to Zope's object model and has no standalone use case."},"id":"accesscontrol","links":{"html":"https://skillfed.io/packages/accesscontrol","md":"https://skillfed.io/packages/accesscontrol.md","pypi":"https://pypi.org/project/accesscontrol/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-07-13","license_spdx":"ZPL-2.1","license_treatment":"unclear","name":"AccessControl","python_support":"supports_current","summary":"Security framework for Zope"},"popularity":{"monthly_downloads":196584,"position":9778,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"7.4"}