I would like to hide some Zope search results, how do I do that? I have a (plone) folder which is only accessible to the group "members", but whenever I do a search for a text string contained in a document in that folder, that document is also returned when I query for it as an anonymous (non-authenticated) user and I'd rather not have it returned at all. In fact, I only want the search results concerning the folder only accessible to group "members", whenever someone from group "members" is quering for it. Thanks, Rik heelgeheim@hotmail.com _________________________________________________________________ Help STOP SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail
G. Heim wrote at 2003-7-15 14:19 +0200:
I would like to hide some Zope search results, how do I do that?
I have a (plone) folder which is only accessible to the group "members", but whenever I do a search for a text string contained in a document in that folder, that document is also returned when I query for it as an anonymous (non-authenticated) user and I'd rather not have it returned at all. In fact, I only want the search results concerning the folder only accessible to group "members", whenever someone from group "members" is quering for it.
Something like this is usually done automatically. The CMF uses the index "AllowedRolesAndUsers". It indexes the roles and users that may view the object. When you perform a query, the query is automatically extended with an "and" that the current users roles or user name must match the "AllowedRolesAndUsers". Dieter
Something like this is usually done automatically.
The CMF uses the index "AllowedRolesAndUsers". It indexes the roles and users that may view the object.
When you perform a query, the query is automatically extended with an "and" that the current users roles or user name must match the "AllowedRolesAndUsers".
That's right, but it doesn't take "Access contents information" of folders into account. So you may be able to view a document, but you aren't allowed to access it, because the folder containing the document does not allow it. This should be covered by allowedRolesAndUsers, but it isn't acually....i have a patch somewhere, but no access to it right now....=| Greetings, Marian
participants (3)
-
Dieter Maurer -
G. Heim -
Marian Saeger