Brian, Thanks a ton. The patch worked perfectly! As it turns out I was using ODBC with Oracle. Everything works great. Rendering results perfectly. Thanks for the prompt response. As always! Theodore E. Patrick Ishophere.com -----Original Message----- From: Brian Lloyd [mailto:Brian@digicool.com] Sent: Monday, July 17, 2000 10:27 AM To: 'Theodore Patrick'; 'zope@zope.org' Subject: RE: [Zope] SECURITY ROLES and < DTML-IN>

I am having trouble rendering a <DTML IN> in ZOPE 2.2.0 to any user regardless of roles.

I have allocated the proper rights to all objects used and nothing happens. The <IN> will not let any user view its contents.

Theodore - I bet you're running into the same problem as the folks using the ODBC adaptor. I've attached the post I made addressing this a few minutes ago. If this fixes your problem, could you send a note to the zope-list and let the folks there know that the fix works for the Oracle DA too? (I'm going out of town today, so I won't be able to forward it if you only reply to me) Thanks!

Hi guys -

For those of you (I've mostly heard ODBC adapter users) having authorization problems with your SQL methods, heres the scoop:

Database connections use one of two classes in the framework for wrapping up result data returned from queries. One of those classes (that understands results in RDB format) was missing a required security assertion.

The results returned by the ODBC adapter were bitten by this - probably there are other adapters that could be affected.

I've attached a patch file for the file: lib/python/Shared/DC/ZRDB/RDB.py

...as well as an updated version of the whole file (since I know a lot of you will be on Windows w/o patch :) Either patch or replace the file and restart Zope to fix the problem.

This is also checked in for a 2.2.1 release that will probably happen after a few weeks when enough people have upgraded to shake out any other problems.

Brian Lloyd brian@digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com