how should I set a role for users of a folder where they can view and copy files only? I've set these permissions: View Management Screen (for seeing the files) Access Contents Info, View (for rendering the files) Add Doc, Images, Files (for copying the files) This almost works but the problem is that with Add Doc, Images, Files (which I need for copying) the users can also add things to this folder and I don't want them to be able to do this. I think I want a permission that allows copying but not adding. - Bill
Bill Kerr writes:
how should I set a role for users of a folder where they can view and copy files only? I've set these permissions: View Management Screen (for seeing the files) Access Contents Info, View (for rendering the files) Add Doc, Images, Files (for copying the files)
This almost works but the problem is that with Add Doc, Images, Files (which I need for copying) the users can also add things to this folder and I don't want them to be able to do this. I think I want a permission that allows copying but not adding. If you mean "copy out", I think you need "Add Files" only at the destination and not the source.
When you meant "copy in", I would say, your requirement is a bit inconsistent as a "copy in" is not that different from an "add". Dieter
From: "Dieter Maurer" <dieter@handshake.de>
Bill Kerr writes:
how should I set a role for users of a folder where they can view and copy files only? I've set these permissions: View Management Screen (for seeing the files) Access Contents Info, View (for rendering the files) Add Doc, Images, Files (for copying the files)
This almost works but the problem is that with Add Doc, Images, Files (which I need for copying) the users can also add things to this folder and I don't want them to be able to do this. I think I want a permission that allows copying but not adding.
If you mean "copy out", I think you need "Add Files" only at the destination and not the source.
When you meant "copy in", I would say, your requirement is a bit inconsistent as a "copy in" is not that different from an "add".
Dieter is correct about this After further experimentation I can't see how it is possible to setup the sort of folder I want using Zope security. I've now eliminated all permissions except for: ** View Management Screen (for seeing the files) The problem is that users can CUT the files with this permission and paste them somewhere else If I don't use View Management Screen then the users can't see the files. If I do use View Management Screen then they can cut them. I just want the users to be able to see them (view only, not be able to cut or modify) and copy them into their personal folders (at a lower level where they have been given local management rights) Can you do this with default zope security settings? The Book of Zope says (page 135) "View Management screens: "... This permission does not allow a user to do any more than view these screens. Additional permissions must be granted for a user to be able to add, edit, or delete objects..." This is very misleading IMO, being able to cut and paste elsewhere does allow the user to do more than view only - Bill
Bill Kerr writes:
.... After further experimentation I can't see how it is possible to setup the sort of folder I want using Zope security. I've now eliminated all permissions except for: ** View Management Screen (for seeing the files) The problem is that users can CUT the files with this permission and paste them somewhere else I would say, you discovered a bug:
Cutting should require "Delete object" permission on the source folder... I would file a Collector report... Dieter
From: "Dieter Maurer" <dieter@handshake.de>
Bill Kerr writes:
.... After further experimentation I can't see how it is possible to setup the sort of folder I want using Zope security. I've now eliminated all permissions except for: ** View Management Screen (for seeing the files) The problem is that users can CUT the files with this permission and paste them somewhere else I would say, you discovered a bug:
Cutting should require "Delete object" permission on the source folder...
I would file a Collector report...
thanks, OK, I've just done that Issue # 391 Title: View Management Screen allows CUT - Bill
participants (2)
-
Bill Kerr -
Dieter Maurer