[Zope-Coders] Bug in SecurityPolicy?

[Paul Winkler]

On Tue, Aug 05, 2003 at 05:04:02PM +0100, Chris Withers wrote:
> Hi,
> 
> This behaviour strikes me as wrong.
> 
> Add a folder, twiddle it's security settings so that anonymous people may 
> 'access contents information' but not 'view'.
> 
> Add a ZPT into that contains, at a minimum:
> 
> <tal:x replace="here/title">
> 
> Now go to folder/your_zpt_name with an unauthenticated browser. You'll more 
> than likely get an auth box popup for the 'title' property access in the 
> ZPT.

What does that have to do with the title? You need View permission to view 
the ZPT even if it was completely blank. 


-- 

Paul Winkler
http://www.slinkp.com
Look! Up in the sky! It's THE SONIC ALLOY!
(random hero from isometric.spaceninja.com)