You may want to use a product designed to do that, such as NuxUserGroups (http://www.zope.org/Members/nuxeo/Products/NuxUserGroups). You'll have to port the group part to LDAPUserFolder though (a starting point (for an older LDAPUserFolder) is at http://www.makinacorpus.org/index.php/zope/ldapusergroups). Florent John K. Hohm <jhohm@acm.org> wrote:
I am using LDAPUserFolder with Zope 2.5.1 to authenticate users. I have users in groups (which show up as roles in Zope) such that the group names are part of some folder names, and I want to put the users in roles in the context of a folder based on whether they are in a group that matches the folder name and a certain role name. This should allow me to assign permissions to those roles in a containing folder and have them apply only to the folders that a user is in a group for. -- Florent Guillaume, Nuxeo (Paris, France) +33 1 40 33 79 87 http://nuxeo.com mailto:fg@nuxeo.com