RE: [Zope-dev] Request for amplification on new Product permissio ns API.
So, what do I need to do to allow controlled access to this object? I understand that Shopper, inheriting from SimpleItem, already has the access to unprotected subobjects flag. And I'd rather protect the object correctly, anyway <grin>. I tried adding an ac_permissions structure to the class, giving View permission to the attribute that is throwing the unauthorized error, but that doesn't seem to have changed the behavior.
Are you calling: Globals.default__class_init__(MyBasketClass) on your Basket class? This is (poorly documented but) necessary for permissions declared in __ac_permissions__ to be correctly initialized. Brian Lloyd brian@digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com
On Fri, 7 Jul 2000, Brian Lloyd wrote:
Are you calling:
Globals.default__class_init__(MyBasketClass)
on your Basket class? This is (poorly documented but) necessary for permissions declared in __ac_permissions__ to be correctly initialized.
Poorly? <grin> Only three classes seem to use this in the base Products: MailBase in MailHost, Draft in OFSP, and ZCatalog. <shrug> I've added a call to this method to the end of the file that defines this class. My __ac__permissions__ structure assigns 'View' privilege to the 'items' method. I still get an unauthorized error when the dtml tries to access that method on the subobject. --RDM
Brian Lloyd wrote:
So, what do I need to do to allow controlled access to this object? I understand that Shopper, inheriting from SimpleItem, already has the access to unprotected subobjects flag. And I'd rather protect the object correctly, anyway <grin>. I tried adding an ac_permissions structure to the class, giving View permission to the attribute that is throwing the unauthorized error, but that doesn't seem to have changed the behavior.
Are you calling:
Globals.default__class_init__(MyBasketClass)
on your Basket class? This is (poorly documented but) necessary for permissions declared in __ac_permissions__ to be correctly initialized.
Should I have this in Squishdot too? Chris
participants (3)
-
Brian Lloyd -
Chris Withers -
R. David Murray