Hi, Is there any way for a Python script to control who is going to be the owner of a file it generate? My testing show that a new object created using manage_X method is always owned by the authenticated person, even if it is created by a proxy script and the authenticated person normally have no right to create a new object in that folder. Is it possible to write a script that change the owner at the time when an object is created, or after the object is created, say if the script is a manager proxy? Regards, Isaac.
Yes you can change the owner of a product. In plone ther is a script called changownership or such wyou can take as an example. The problem is that it involves an function starting with an undersore so it must be done with external code (external method or product) Robert ----- Original Message ----- From: "Isaac To" <kkto@csis.hku.hk> To: <zope@zope.org> Sent: Saturday, November 30, 2002 9:12 AM Subject: [Zope] Zope scripting and ownership
Hi,
Is there any way for a Python script to control who is going to be the owner of a file it generate? My testing show that a new object created using manage_X method is always owned by the authenticated person, even if it is created by a proxy script and the authenticated person normally have no right to create a new object in that folder. Is it possible to write a script that change the owner at the time when an object is created, or after the object is created, say if the script is a manager proxy?
Regards, Isaac.
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
"robert" == robert rottermann <robert@redcor.ch> writes:
robert> Yes you can change the owner of a product. In plone ther is a robert> script called changownership or such wyou can take as an robert> example. The problem is that it involves an function starting robert> with an undersore so it must be done with external code robert> (external method or product) Anyone knows whether the lack of such a scripting interface is due to a careless omission, or due to security implications that it brings? If it is due to security implications, what must be considered before implementing such an external method? Regards, Isaac.
participants (2)
-
Isaac To -
robert rottermann