[Plone-NGOs] Initial thoughts on a "Plone for Nonprofits" bundle

[George Lee]

Kai Harris <kai.harris at ...> writes:

> 
> I second Derec's suggestion of CMFContentPanels.  I found it to be
> much easier to use 'out of the box' than CompositePack.  ContentPanels
> needs its UI refined some and it would be very helpful to have some
> additional Panel templates.  But you don't need to go to the ZMI and
> once you figure out the quirky UI, it's pretty powerful.


I haven't used CompositePack or ContentPanels yet, but this reminds me of a
dilemma I continually face in programming -- the trade-off between:

* Strong security
* Solid programming practices (filesystem based code, Zope3 views and adapters
that allow for easier reuse and extensibility from a developers' standpoint)
* Ability to customize through the web (TTW)

For instance one thing that scared me off about some of the existing newsletter
products was the TALES expressions that could be inputed from the web -- which
screamed "Potential security holes" to me. The newsletter product I made for
myself lets me do some powerful work with Zope3 views to make my newsletters
from some filesystem-based templates, but is hard to customize TTW. (When
Zope3-style view templates can be customized through the web, as is being worked
on in plone.app.layout I believe, this will help some.)

Is this a common trade-off that people run into? What are some of the best ways
to do this?


Peace,
George