I added the line in lib/python/Shared/DC/ZRDB/DA.py, line 435, as instructed -- with no change in behaviour. -- Alexander Staubo http://www.mop.no/~alex/ "QED?" said Russell. "It's Latin," said Morgan. "It means, So there you bastard." --Robert Rankin, _Nostramadus Ate My Hamster_

-----Original Message----- From: Brian Lloyd [mailto:Brian@digicool.com] Sent: 26. juli 1999 15:24 To: 'Alexander Staubo'; Zope Mailing List (E-mail) Subject: RE: [Zope] "Access contents information" and SQL Methods; bug?

...

I have an interesting problem with a part of a site that needs to be limited to privileged editors. Let's call this role "Editor". The problem is, unless I give the "Access contents information" permission to the "Anonymous" role, SQL Method calls are not permitted, even if I give _all_ permissions to the "Editor" role.

It's that curious? <!--#var AUTHENTICATED_USER--> equals to my editor user (defined in folder somewhere above the restricted folder), and <!--#var "AUTHENTICATED_USER.getRoles()"--> gives me ['Editor']. Btw, I've disabled acquisiton of permissions on the restricted folder.

Unless I give "Access contents information" to "Anonymous", the following traceback is emitted when authentication fails:

For now, I'll enable "Access contents information" for the "Anonymous" role, but in the long run I feel this is a bad solution.

-- Alexander Staubo

I think that this is a bug in permission registration. I've added a fix that seems to do the trick in my test area - can you try the following and let me know if this takes care of your problem?:

In the file lib/python/Shared/DC/ZRDB/DA.py, add the line:

Globals.default__class_init__(DA)

...right after the definition of the DA class, and do a restart. This should make sure that the permissions are registered correctly.

Brian Lloyd brian@digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

_______________________________________________ Zope maillist - Zope@zope.org http://www.zope.org/mailman/listinfo/zope

(To receive general Zope announcements, see: http://www.zope.org/mailman/listinfo/zope-announce

For developer-specific issues, zope-dev@zope.org - http://www.zope.org/mailman/listinfo/zope-dev )