[ZDP] BackTalk to Document The Zope Book (2.5 Edition)/Users and Security

webmaster@zope.org webmaster@zope.org
Tue, 21 Jan 2003 07:14:08 -0500


A comment to the paragraph below was recently added via http://www.zope.org/Documentation/Books/ZopeBook/current/Security.stx#3-114

---------------

      The problem with this arrangement is that your DTML Method that
      sends email will fail for anonymous users. How can you get
      around this problem? The answer is to set the proxy roles on the
      DTML Method that sends email so that when it executes it has the
      "Manager" role. Visit the Proxy management tab on your DTML
      Method, as shown in [6-7].

        % Anonymous User - Jan. 21, 2003 7:14 am:
         But when it is accessed for validation it hasn't, has it? It is accessed with the roles of the real user, not
         with the proxy roles. So one must grant the 'view' permission to the Anonymous role in order to allow
         anonymous visitors to use it, isn't it?