Howto prevent deletion of acl_users
Hi! How can I prevent people with FTP access from deleting their acl_users folder? Is there a simple access_rule I can use or some special security setting? I tried to remove the right to delete things inside the acl_users folder, but the folder itself can still be deleted. Thanks and regards, Florian Schulze
by changing the "Delete objects" permission? Maybe you can add a manage_beforeDelete() hook to the userfolder that raises an exception if someone is trying to delete it. -aj --On Montag, 15. Dezember 2003 12:13 Uhr +0100 Florian Schulze <florian.proff.schulze@gmx.net> wrote:
Hi!
How can I prevent people with FTP access from deleting their acl_users folder?
Is there a simple access_rule I can use or some special security setting? I tried to remove the right to delete things inside the acl_users folder, but the folder itself can still be deleted.
Thanks and regards, Florian Schulze
_______________________________________________ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Florian Schulze wrote:
Hi!
How can I prevent people with FTP access from deleting their acl_users folder?
If you set an attribute called "_reserved_names" on a "folder" object, you can prevent deletion. # The userfolder cannot be deleted folder_obj._reserved_names = ('acl_users',) I don't think you can do it from a pythonscript, so you probably need an external method. It would have been easier if there was a method for setting them, but there ain't. regards Max M
Thanks for this tip! I was able to write an external method to set that attribute and it works fine. Thanks and regards, Florian Schulze On Mon, 15 Dec 2003 12:41:02 +0100, Max M <maxm@mxm.dk> wrote:
Florian Schulze wrote:
Hi!
How can I prevent people with FTP access from deleting their acl_users folder?
If you set an attribute called "_reserved_names" on a "folder" object, you can prevent deletion.
# The userfolder cannot be deleted folder_obj._reserved_names = ('acl_users',)
I don't think you can do it from a pythonscript, so you probably need an external method.
It would have been easier if there was a method for setting them, but there ain't.
regards Max M
_______________________________________________ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
-- Using M2, Opera's revolutionary e-mail client: http://www.opera.com/m2/
participants (3)
-
Andreas Jung -
Florian Schulze -
Max M