Hi, Here's a load of questions that have sprung up as a result of trying to get to grips with SiteAccess 2 on Zope 2.2.1: It looks like REQUEST.steps is the replacement for PARENTS? Is that so? Small grumble: REQUEST['TraversalRequestNameStack'] is a bit of a long-winded name :P
If an Access Rule is broken, and is preventing normal access, it can be disabled by restarting Zope with environment variable SUPPRESS_ACCESSRULE set.
So now you have to restart Zope to undo a screwup? I guess __no_before_traverse__, or whatever it was, was a security whole, or something? Hmm, the example for Multiple Sites isn't very robust :-( http://www.zope.org/Members/4am/SiteAccess2/vhosting You use HTTP_HOST, without ensuring it exists. I remember having problems with this in Zope 2.1.6 as HTTP_HOST doesn't exist when you access things via FTP, so an error gets thrown, effectively preventing you from accessing any objects covered by the access rule through FTP. My solution for this is just to wrap the rule in <dtml-if "REQUEST.has_key('HTTP_HOST')"> Well, that's all for now... cheers, Chris