[Zope-CMF] Security for product developers

Dieter Maurer dieter@handshake.de
Fri, 4 Jul 2003 20:56:40 +0200


Reverend Matt wrote at 2003-7-1 21:13 -0000:
 > Is there any good documentation on CMF Security for developers?  I've
 > encountered several situation where I've had to jump through some odd
 > hoops to make things work (like anonymous replies to Documents).  Is
 > there a way to configure security in my install scripts (I know that
 > the acquisition path prevents skinned items from using the security of
 > the skins folder, but what about if I've set a proxy role on an object?).

Proxie roles might work.

I do not think that there is a table mapping methods to the
protecting permission.

"DocFinder" might help you to find out such information
(for this, you must run Zope with "ZOPE_SECURITY_POLICY=PYTHON").


Dieter