Hmm, sorry, I guess I have been confusing owner local roles with the real owner of an object. See : http://zope.org/Documentation/Books/ZopeBook/2_6Edition/Security.stx But now I'm a bit confused about how the owner gets set on an object if it is created by an anonymous user. In my case it is created by code in a product, activated by an anonymous user. How is it determined which user to set as owner in that case ? Sune

I have an object created by anonymous via some code in a product, that uses _setObject

In the ZMI the owner of the container is shown as owner of the object, but the object has no local roles. (No owner local role) It has no _owner attribute either.

The ZMI uses this to get the owner info (from owner.dtml):

This object is <dtml-if owner_info><dtml-with owner_info mapping>owned by &dtml-id; (&dtml-path;).</dtml-with

...

<dtml-else>unowned.</dtml-if>

Why does the ZMI show the object as having an owner, when it actually doesn't ?

found this on the list: (...) Also, is this a DTML document or DTML method, because methods seem to acquire the roles from their container. (...) http://mail.zope.org/pipermail/zope/2000-March/106447.html

aquisition at play ?

But I recall that I have seen "This object is unowned" in the ZMI sometime.

Sune

_______________________________________________ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )