RE: [Zope] manage_workspace redirects to index_html! EMERGENCY!
It turns out -- and until I hear anything else, I chalk this up as a bug -- that if you rescind all permissions from the "Manager" role, Zope will behave like described below. Try it -- it's weird. The behaviour is slightly different under beta 1, but still not correct. If I login as the "superuser", theoretically I should have unlimited access, correct? -- Alexander Staubo http://www.mop.no/~alex/ "QED?" said Russell. "It's Latin," said Morgan. "It means, So there you bastard." --Robert Rankin, _Nostramadus Ate My Hamster_
-----Original Message----- From: Alexander Staubo [mailto:alex@mop.no] Sent: 24. juli 1999 22:12 To: Zope Mailing List (E-mail) Subject: [Zope] manage_workspace redirects to index_html! EMERGENCY!
(Posted to the Collector! Could somebody deal with this, very fast like?)
After editing some permission properties, my database has gone mad!
The left-hand frame of the management interface views all right. The right-hand frame does not. When I click on the root node, instead of manage_workspace I am redirected to manage_propertiesForm. On any arbitrary folder, manage_workspace is redirected to index_html (acquired or actual). Here's the HTTP output:
""" GET /Zope/ExLibris/manage_workspace HTTP/1.1 Host: www.musikkterapi.no
HTTP/1.1 302 Moved Temporarily Date: Sat, 24 Jul 1999 20:07:26 GMT Server: Apache/1.3.6 (Unix) Bobo-Exception-File: /usr/src/Zope-2.0.0a4-src/lib/python/App/Management.py Bobo-Exception-Line: 205 Bobo-Exception-Type: Redirect Bobo-Exception-Value: http://www.musikkterapi.no/Zope/ExLibris/index_html X-Powered-By: Zope (www.zope.org), Python (www.python.org) Location: http://www.musikkterapi.no/Zope/ExLibris/index_html Content-Length: 0 Content-Type: application/x-httpd-cgi """
Restarting Zope does not help one bit.
-- Alexander Staubo http://www.mop.no/~alex/ "QED?" said Russell. "It's Latin," said Morgan. "It means, So there you bastard." --Robert Rankin, _Nostramadus Ate My Hamster_
_______________________________________________ Zope maillist - Zope@zope.org http://www.zope.org/mailman/listinfo/zope
(To receive general Zope announcements, see: http://www.zope.org/mailman/listinfo/zope-announce
For developer-specific issues, zope-dev@zope.org - http://www.zope.org/mailman/listinfo/zope-dev )
At 01:18 AM 7/26/99 +0200, Alexander Staubo wrote:
It turns out -- and until I hear anything else, I chalk this up as a bug -- that if you rescind all permissions from the "Manager" role, Zope will behave like described below. Try it -- it's weird.
The issue is that as of Zope 2, the management screens are tailored to match your permissions. If you don't have permissions for the method that produces a management screen, it won't be shown to you. The available management tabs are trimmed to match what you are authorized to do. Therefore if there are say 5 management tabs on a given object and you only have permissions to see one of them, 'View', then that's what you'll get back from 'manage_workspace'. So clicking on an object in the management screen would show you 'index_html' in this case. Also the product add list will now not display objects that you don't have adequate permissions to create.
The behaviour is slightly different under beta 1, but still not correct. If I login as the "superuser", theoretically I should have unlimited access, correct?
Right. If you log in as the superuser but still see restricted management screens this is a bug. If this is the case and you haven't already filed it in the Collector, please do so. Thanks, and sorry for the confusion. -Amos
participants (2)
-
Alexander Staubo -
Amos Latteier