RE: [Zope] Newbie needs help with permissions/authorization syste m
1) You must have Manage Properties permission where you try to add the ZClass if it gets it's permissions by acquision 2) Under Control_Panel/Products/DeriveClass/DeriveClass/ < Define Permissions > tab ensure that Permission for this Object: Manage Properties = Manage Properties 3) Under Control_Panel/Products/DeriveClass/DerviceClass/propertysheets/common/NameOf PropertySheet/ < Define Permissions > tab ensure that Permission for this Object: Manage Properties = Manage Properties Hope that works. If you are a newbie, I'm way behind :D I didn't touch ZClasses until I'd been using Zope for 6+ Months. Troy -----Original Message----- From: Nicolas Chauvat [mailto:Nicolas.Chauvat@logilab.fr] Sent: Friday, February 09, 2001 11:26 AM To: zope@zope.org Subject: [Zope] Newbie needs help with permissions/authorization system Hi list, I'm a Zope newbie that has to maintain an existing setup. I have a base class BaseClass, and a derived class DeriveClass (supposed to be a generic registration system, I edited the names). That's a simple registration system that stores form info into Zope objects that can later be viewed using a DTML method. The process is divided in three steps: DeriveClass_factory branches to DeriveClass_form method that displays the form. Posting the form starts the DeriveClass_add method that creates the DeriveClass object that has a set of RegisterInfo properties. My problem is that everything works fine when I'm logged as a manager but DeriveClass_add asks for login/password when I'm an anonymous user. If I click on "Cancel", the _add method fails on manage_editProperties() ... File /usr/local/Zope-2.2.1-src/lib/python/DocumentTemplate/DT_With.py, line 146, in render (Object: DeriveClass.createInObjectManager(REQUEST['id'],REQUEST)) File /usr/local/Zope-2.2.1-src/lib/python/DocumentTemplate/DT_Util.py, line 337, in eval (Object: propertysheets.RegisterInfo.manage_editProperties(REQUEST)) (Info: REQUEST) ^^^^^^^^^^^^^^^^^^^^^ File <string>, line 0, in ? *** HERE **** File /usr/local/Zope-2.2.1-src/lib/python/DocumentTemplate/DT_Util.py, line 140, in careful_getattr File /usr/local/Zope-2.2.1-src/lib/python/OFS/DTMLMethod.py, line 194, in validate (Object: DeriveClass_add) File /usr/local/Zope-2.2.1-src/lib/python/AccessControl/SecurityManager.py, line 139, in validate File /usr/local/Zope-2.2.1-src/lib/python/AccessControl/ZopeSecurityPolicy.py, line 209, in validate Unauthorized: (see above) I've been running around the source/repository checking permissions, security, etc. for hours and I can't figure out what's wrong with it. Any help would be appreciated, feel free to flame me (and help me!) off-list if that's a FAQ (I didn't find anything in the archive). TIA, -- Nicolas Chauvat http://www.logilab.com - "Mais où est donc Ornicar ?" - LOGILAB, Paris (France) _______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
On Fri, 9 Feb 2001, Farrell, Troy wrote:
1) You must have Manage Properties permission where you try to add the ZClass if it gets it's permissions by acquision
The user is anonymous and the place where I try to add the instances of the ZClass is the Folder. I can't find the "Manage Properties" permission for the folder...
2) Under Control_Panel/Products/DeriveClass/DeriveClass/ < Define > Permissions > tab ensure that Permission for this Object: Manage Properties = Manage Properties
"Manage Properties" were set to "Add DeriveClass". I changed it to "Manage Properties" and did the same for the base class.
3) Under Control_Panel/Products/DeriveClass/DerviceClass/propertysheets/common/NameOf PropertySheet/ < Define Permissions > tab ensure that Permission for this Object: Manage Properties = Manage Properties
That's the case for both classes.
Hope that works.
It didn't :-( I get the same error as before.
If you are a newbie, I'm way behind :D I didn't touch ZClasses until I'd been using Zope for 6+ Months.
I wish I hadn't to touch ZClasses. If only I could see the code! That Zope management interface is one of the worst things I've seen in years... and reading the Zope documentation didn't help figuring out how to turn existing Zope classes into good old python code. -- Nicolas Chauvat http://www.logilab.com - "Mais où est donc Ornicar ?" - LOGILAB, Paris (France)
participants (2)
-
Farrell, Troy -
Nicolas Chauvat