Re: [Zope-dev] permissions/authorization on non ZClass/product objects

3 Aug 2000


      On Wed, 2 Aug 2000 22:41:46 -0400 (EDT), Chris McDonough
<chrism@digicool.com> wrote:
...
Karl,
Two things come to mind:
First, make sure you're returning the instances in the context of their
container, e.g. instead of:
def returnstuff(self):
       class foo:
           pass
       return foo()
do
def returnstuff(self):
       class foo:
           pass
       return foo().__of__(self)
If you want to do that, then you need to inherit the acquisition base
class too....

    def returnstuff(self):
        class foo(Acquisition.Implicit):
            pass
        return foo().__of__(self)
...
You may also want to try the magic:
   def returnstuff(self):
       class foo:
           __allow_access_to_unprotected_subobjects__ = 1
           pass
       return foo().__of__(self)
in the class instances you return if nothing in them needs to be protected
by permissions in any way.
Using __allow_access_to_unprotected_subobjects__ the object doesnt
_need_ to have a context (although it might be useful for other
things), so you can drop the __of__


Toby Dickenson
tdickenson@geminidataloggers.com