Adding the ZSyncer in /spam/eggs on the source and destination server works fine, but I'm hoping to avoid that since we have too many non-root acl_user accounts. So here's what I tried. 1) I created a restricted role called "Sync" at the root folder and only gave it the "Use ZSyncer" permission at the root level. 2) I gave the user in /spam/eggs/acl_users an acl_user account at the root folder with only the Sync role enabled. The Sync operation returns an "access denied" error. 3) Next, I clicked the Security tab for the ZSyncer instance at the root folder and enabled all permissions for the Sync role. No luck--I'm still getting a "403: You do not have access to do that" error. Am I missing something here? What permissions do I need to enable for the Sync role and/or the ZSyncer instance at the root folder in order for a non-Manager acl_user account to use a ZSyncer instance at the root folder? - Kamal On Jan 14, 2004, at 8:07 AM, Paul Winkler wrote:
On Tue, Jan 13, 2004 at 04:36:59PM -0800, Kamal Gill wrote:
How does one enable a user to use a ZSyncer instance at the root folder if the user has an acl_users account at folder /spam/eggs/ (for example) but not at the root folder?
I don't think ZSyncer has anything to do with the problem. In general a user must exist at or above the place where you want to authorize him/her. So, add the user in /acl_users with restricted roles.
or you could try adding a zsyncer in /spam/eggs with the same id as the one in the root. Add a zsyncer in the same folder on the destination server.
--
Paul Winkler http://www.slinkp.com Look! Up in the sky! It's BLOODY RACER! (random hero from isometric.spaceninja.com)
_______________________________________________ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )