Which permission is need to have to NOT get this message: "You are not authorized to access manage_renameObjects. " I have a role which is only supposed to be able to rename Image objects and add/edit properties of Image objects. This user uses a special interface I built and does not go /manage. Tried the: Change Images and Files ...permission but that wasn't it. Cheers, Peter
Peter Bengtsson wrote:
Which permission is need to have to NOT get this message: "You are not authorized to access manage_renameObjects. "
I have a role which is only supposed to be able to rename Image objects and add/edit properties of Image objects. This user uses a special interface I built and does not go /manage.
Tried the: Change Images and Files ...permission but that wasn't it.
Cheers, Peter
I believe it would be "Manage Properties" although I could be wrong. -- | Casey Duncan | Kaivo, Inc. | cduncan@kaivo.com `------------------>
Which permission is need to have to NOT get this message: "You are not authorized to access manage_renameObjects. "
I have a role which is only supposed to be able to rename Image objects and add/edit properties of Image objects. This user uses a special interface I built and does not go /manage.
Tried the: Change Images and Files ...permission but that wasn't it.
Cheers, Peter
I believe it would be "Manage Properties" although I could be wrong.
Nops! Tried that.
-- | Casey Duncan | Kaivo, Inc. | cduncan@kaivo.com `------------------>
Peter Bengtsson wrote:
I believe it would be "Manage Properties" although I could be wrong.
Nops! Tried that.
After reading the all knowing source and experimenting here are the permissions you need: Access contents information View View Management Screens Delete Objects Add (Insert Object Type here) The last permission controls what types of objects can be renamed. There is no way to restrict access to the rename form, however, simply having View Management screens gives you that. -- | Casey Duncan | Kaivo, Inc. | cduncan@kaivo.com `------------------>
Ok. New question! This is very strange. I create a user called "monkey" in a folder called "icons". The "monkey" user has the "foodexpert" role. These permissions are ticked for the foodexpert role: - Access contents information - Add Documents, Images, and Files - Change Images and Files - Delete objects - Manage properties - View - View management screens All I want the monkey to be able to do is to add/edit (name and properties)/remove Image objects in a folder called "icons". The monkey fills in a form to upload an Image (a copy of the manage_addImage form almost). When submitting this DTML code is called: <dtml-call "PARENTS[0].manage_addImage(REQUEST['id'], REQUEST['file'])"> Simple, isn't it? But it does NOT work! "You are not authorized to access manage_addImage. " Fuck! the monkey things. Goes /manage and can select Add Image from the drop down list and can add Images with no problem. However, I want the monkey to be able to do these simple things using MY management interface. Is this a bug? Peter ----- Original Message ----- From: "Casey Duncan" <cduncan@kaivo.com> To: "Peter Bengtsson" <mail@peterbe.com> Cc: <zope@zope.org> Sent: Wednesday, May 02, 2001 6:12 PM Subject: Re: [Zope] rename objects permission
Peter Bengtsson wrote:
I believe it would be "Manage Properties" although I could be wrong.
Nops! Tried that.
After reading the all knowing source and experimenting here are the permissions you need:
Access contents information View View Management Screens Delete Objects Add (Insert Object Type here)
The last permission controls what types of objects can be renamed. There is no way to restrict access to the rename form, however, simply having View Management screens gives you that.
-- | Casey Duncan | Kaivo, Inc. | cduncan@kaivo.com `------------------>
Peter Bengtsson wrote:
Ok. New question! This is very strange.
I create a user called "monkey" in a folder called "icons". The "monkey" user has the "foodexpert" role. These permissions are ticked for the foodexpert role: - Access contents information - Add Documents, Images, and Files - Change Images and Files - Delete objects - Manage properties - View - View management screens
All I want the monkey to be able to do is to add/edit (name and properties)/remove Image objects in a folder called "icons". The monkey fills in a form to upload an Image (a copy of the manage_addImage form almost). When submitting this DTML code is called: <dtml-call "PARENTS[0].manage_addImage(REQUEST['id'], REQUEST['file'])"> Simple, isn't it? But it does NOT work! "You are not authorized to access manage_addImage. "
Fuck! the monkey things. Goes /manage and can select Add Image from the drop down list and can add Images with no problem. However, I want the monkey to be able to do these simple things using MY management interface.
Is this a bug?
Peter
Assuming action is a DTML method, you do not need PARENTS[0]. That is likely the cause of the problem. I think it is trying to add the image to the parent folder of the icons folder. Try removing it. -- | Casey Duncan | Kaivo, Inc. | cduncan@kaivo.com `------------------>
----- Original Message ----- From: "Casey Duncan" <cduncan@kaivo.com> To: "Peter Bengtsson" <mail@peterbe.com> Cc: "Dieter Maurer" <dieter@handshake.de>; <zope@zope.org> Sent: Thursday, May 03, 2001 4:44 PM Subject: Re: [Zope] rename objects permission
Peter Bengtsson wrote:
Ok. New question! This is very strange.
I create a user called "monkey" in a folder called "icons". The "monkey" user has the "foodexpert" role. These permissions are ticked for the foodexpert role: - Access contents information - Add Documents, Images, and Files - Change Images and Files - Delete objects - Manage properties - View - View management screens
All I want the monkey to be able to do is to add/edit (name and properties)/remove Image objects in a folder called "icons". The monkey fills in a form to upload an Image (a copy of the
manage_addImage
form almost). When submitting this DTML code is called: <dtml-call "PARENTS[0].manage_addImage(REQUEST['id'], REQUEST['file'])"> Simple, isn't it? But it does NOT work! "You are not authorized to access manage_addImage. "
Fuck! the monkey things. Goes /manage and can select Add Image from the drop down list and can add Images with no problem. However, I want the monkey to be able to do these simple things using MY management interface.
Is this a bug?
Peter
Assuming action is a DTML method, you do not need PARENTS[0]. That is likely the cause of the problem. I think it is trying to add the image to the parent folder of the icons folder. Try removing it.
No, tried. The behaviour persists when I try without PARENTS[0]. I.e... <dtml-call "manage_addImage(REQUEST['id'], REQUEST['file'])"> ...does NOT either work. Cheers. Thanks for the support. Peter
-- | Casey Duncan | Kaivo, Inc. | cduncan@kaivo.com `------------------>
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Peter Bengtsson wrote:
Assuming action is a DTML method, you do not need PARENTS[0]. That is likely the cause of the problem. I think it is trying to add the image to the parent folder of the icons folder. Try removing it.
No, tried. The behaviour persists when I try without PARENTS[0]. I.e... <dtml-call "manage_addImage(REQUEST['id'], REQUEST['file'])"> ...does NOT either work.
Cheers. Thanks for the support. Peter
try creatin a DTML method in the icons folder called testAdd, add this code to it: <dtml-call expr="manage_addImage('test_image','')"> and make sure monkey can view it. Then view it as monkey. Does it work? -- | Casey Duncan | Kaivo, Inc. | cduncan@kaivo.com `------------------>
participants (2)
-
Casey Duncan -
Peter Bengtsson