[Zope-PTK] access rights model

[Lucas Hofman]

I am trying to achieve that a anonymous user is able to join or to login
but nothing else. Alas I fear I misunderstand the security model. I
unchecked the view box for the portal, unchecked all aquire boxes, and
added view for anonymous in index_html, std_header and std_footer. The
error message when trying to render (as anonymous) index_html is:


  Zope Error

  Zope has encountered an error while publishing this resource. 

  Unauthorized

  You are not authorized to access Date. 

  Traceback (innermost last):
    File
/usr/share/Zope-2.2.0-linux2-x86/lib/python/ZPublisher/Publish.py, line
222, in publish_module
    File
/usr/share/Zope-2.2.0-linux2-x86/lib/python/ZPublisher/Publish.py, line
187, in publish
    File
/usr/share/Zope-2.2.0-linux2-x86/lib/python/ZPublisher/Publish.py, line
171, in publish
    File
/usr/share/Zope-2.2.0-linux2-x86/lib/python/ZPublisher/mapply.py, line
160, in mapply
      (Object: index_html)
    File
/usr/share/Zope-2.2.0-linux2-x86/lib/python/ZPublisher/Publish.py, line
112, in call_object
      (Object: index_html)
    File /usr/share/Zope-2.2.0-linux2-x86/lib/python/OFS/DTMLMethod.py,
line 167, in __call__
      (Object: index_html)
    File
/usr/share/Zope-2.2.0-linux2-x86/lib/python/DocumentTemplate/DT_String.py,
line 502, in __call__
      (Object: index_html)
    File /usr/share/Zope-2.2.0-linux2-x86/lib/python/OFS/DTMLMethod.py,
line 163, in __call__
      (Object: standard_html_header)
    File
/usr/share/Zope-2.2.0-linux2-x86/lib/python/DocumentTemplate/DT_String.py,
line 502, in __call__
      (Object: standard_html_header)
    File
/usr/share/Zope-2.2.0-linux2-x86/lib/python/DocumentTemplate/DT_Let.py,
line 147, in render
      (Object: member="getPortal().getAuthenticatedMember()")
    File
/usr/share/Zope-2.2.0-linux2-x86/lib/python/DocumentTemplate/DT_Util.py,
line 331, in eval
      (Object: _.hasattr(this(),'Date') and Date().isFuture())
      (Info: Date)
    File /usr/share/Zope-2.2.0-linux2-x86/lib/python/OFS/DTMLMethod.py,
line 189, in validate
      (Object: index_html)
    File
/usr/share/Zope-2.2.0-linux2-x86/lib/python/AccessControl/SecurityManager.py,
line 139, in validate
    File
/usr/share/Zope-2.2.0-linux2-x86/lib/python/AccessControl/ZopeSecurityPolicy.py,
line 209, in validate
  Unauthorized: (see above)

What is wrong here? Any suggested reading to get a better understanding
of how the portal handles permissions?

Thanks for all help, Lucas
-- 
Lucas Hofman
PGS Seres                                        tel: +47 67514059
PO Box 354                                       fax: +47 67526640
N-1324 Lysaker, Norway