15 Aug
2001
15 Aug
'01
7:07 p.m.
Todd Loomis writes:
I'm trying to create a file system with access control, however when I login as some who shouldn't see everything I still do. Here's my code: .... <dtml-tree folders branches_expr="objectValues()" sort=title_or_id single=1 nowrap=0 skip_unauthorized=1> The "authorization" check employed by "dtml-tree" is too weak. Replace "objectValues" by a call to "ZopeFind" with correct arguments for "obj_permission" and "obj_roles"....
Dieter