[Zope-CMF] Confused about Permission "Set own properties"

[Jens Wolk]

CMF-1.2 / Zope 2.5.1

Hi everybody,

Goal: disallow users of a certain role to change their preferences (password, 
skin).

Approach: clear the permission "Set own properties" for that role

Sideeffect: users with this role can't login at all. They are redirected to 
the login screen at once.

One possible cause for this behavior was IMO that logged_in of the zpt_generic 
skin calls setProperties (a routine which is accesible to those with the "Set 
own properties" permission) on two lines for storing away the last time the 
user has logged in. But if these two lines are deleted, the user still can't 
login.

Can anybody help?

Yours. Jens