Hi! I'm trying to set up a site with user registration (similar to that on the zope site), and have been using the JobBoard HOWTO as an example of how to let anonymous users add objects. The code works just like it should when I'm logged in as Manager, and I *have* set the proxy role of the method that processes the form to Manager, but still, when I try to use it anonymously, I get the message that I don't have access to the user class... I've tried several implementations, but I don't understand the problem... If the method is proxied as Manager, shouldn't it (and all the methods it calls) have the rights of Manager? (I also tried adding Owner, but that didn't help...) In that case - why doesn't it work, while it *does* work for me when I'm logged in as Manager? Can there be a standard problem hiding here? (Or, perhaps, it's obvious?) Any help is appreciated. Thanks. -- Magnus Lie Hetland (magnus at hetland dot org) "Reality is what refuses to disappear when you stop believing in it" -- Philip K. Dick
Magnus: In setting up the JobBoard from the HOWTO, what worked for me was setting the proxy role for both the method in the JobBoard product that processes the form to "Manager" (Product at/Control_Panel/Products/JobBoard/job_board_entry_add); as well as the regular method that processes the form to "Manager". The HOWTO seems to indicate that only the regular method must be set to proxy, i.e., "Important:The "entry_addProcessor" must be set to "Manager" proxy for it to work." When I followed only this instruction, I ran into the same problem that you did. However, while this works for me, I am not sure that this is the zen way of doing things. Regards, Roger
Hi!
I'm trying to set up a site with user registration (similar to that on the zope site), and have been using the JobBoard HOWTO as an example of how to let anonymous users add objects. The code works just like it should when I'm logged in as Manager, and I *have* set the proxy role of the method that processes the form to Manager, but still, when I try to use it anonymously, I get the message that I don't have access to the user class... I've tried several implementations, but I don't understand the problem...
If the method is proxied as Manager, shouldn't it (and all the methods it calls) have the rights of Manager? (I also tried adding Owner, but that didn't help...) In that case - why doesn't it work, while it *does* work for me when I'm logged in as Manager?
Can there be a standard problem hiding here? (Or, perhaps, it's obvious?)
Any help is appreciated. Thanks.
--
Magnus Lie Hetland (magnus at hetland dot org)
"Reality is what refuses to disappear when you stop believing in it" -- Philip K. Dick
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
On Sun, 6 Aug 2000, Magnus Lie Hetland wrote:
I'm trying to set up a site with user registration (similar to that on the zope site), and have been using the JobBoard HOWTO as an example of how to let anonymous users add objects. The code works just like
This how-to was written before Zope 2.2.0 was released. 2.2.0 involved major security policy changes.
If the method is proxied as Manager, shouldn't it (and all the methods it calls) have the rights of Manager? (I also tried
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Not in 2.2.0. Now, AFAIK, you have to explicitly set proxy roles for each method.
Can there be a standard problem hiding here? (Or, perhaps, it's obvious?)
Try to set role 'Manager' for job board entry's constructor (job_board_entry_add). ololo@zeus.polsl.gliwice.pl /--------------------------------------\ | `long long long' is too long for GCC | \--------------------------------------/
participants (3)
-
Aleksander Salwa -
LinuxFreedom -
Magnus Lie Hetland