I am having some problems comprehending a security issue with zope and page templates. I have a folder protected by exUserFolder, and that folder contains another folder where my site is sitting. I have a page macro that all other pages use, so i just need to fill in slots of content throughtout the site. i want to make a page available to Anonymous users. But this page template contains calls to z sql methods, the page macro, some images, etc etc etc. I changed my Security permissions on this page tempalte for Anon to view and access object contents but i am still getting the authentication popup. That didn't work. So I gave anonymous everything in the security tab, and still no joy. Do I have to allow for Anon on everything that this template uses to fill its slot? Like every image, every z sql method, the page macros, and everything else? Thanks, Patrick __________________________________ Do you Yahoo!? Friends. Fun. Try the all-new Yahoo! Messenger. http://messenger.yahoo.com/
patrick sullivan wrote at 2004-5-28 10:49 -0700:
I am having some problems comprehending a security issue with zope and page templates. I have a folder protected by exUserFolder, and that folder contains another folder where my site is sitting. I have a page macro that all other pages use, so i just need to fill in slots of content throughtout the site.
i want to make a page available to Anonymous users. But this page template contains calls to z sql methods, the page macro, some images, etc etc etc. I changed my Security permissions on this page tempalte for Anon to view and access object contents but i am still getting the authentication popup. That didn't work. So I gave anonymous everything in the security tab, and still no joy.
Difficult security problems are best understood with the "VerboseSecurity" product. For Zope 2.7, you will need the CVS version. -- Dieter
participants (2)
-
Dieter Maurer -
patrick sullivan