[ZCM] [ZC] 572/10 Resolve "WebDAV GET protected by 'FTP Access' permission"

[Collector: Zope Bugs, Features, and Patches ...]

Issue #572 Update (Resolve) "WebDAV GET protected by 'FTP Access' permission"
 Status Resolved, Zope/bug medium
To followup, visit:
  http://collector.zope.org/Zope/572

==============================================================
= Resolve - Entry #10 by regebro on Oct 21, 2003 11:28 am

 Status: Accepted => Resolved


________________________________________
= Accept - Entry #9 by regebro on Oct 21, 2003 9:25 am

 Status: Rejected => Accepted

 Supporters added: regebro

Sorry, clicked the wrong status...
________________________________________
= Reject - Entry #8 by regebro on Oct 21, 2003 9:23 am

 Status: Pending => Rejected

OK, we should then do a separation of the FTP and WebDAV gets. It's a simple fix I think, I can do it. 
________________________________________
= Comment - Entry #7 by chrisw on Oct 17, 2003 4:54 am

I disagree. Even if the only point of the second method (which could be a one line implementation that called the 1st method) was to allow a seperate permission name, I still think it'd be well worth doing...
________________________________________
= Comment - Entry #6 by regebro on Oct 16, 2003 11:03 am

Yes, you need "FTP Access" to get WebDAV access. Yes, it's counterintuitive. The only solution I can see is to start accessing webDAV through another separate method, that as default calls manage_FTPget(). This really means that you have two methods that does the same, which is kinda pointless.



________________________________________
= Comment - Entry #5 by chrisw on Jan 6, 2003 10:54 am

Blech! That's pretty lame :-(

Was there a good reason for that to be the case?

More usefully, who's best placed to fix this? I don't appear to have the pre-requisite knowledge...

Chris
________________________________________
= Comment - Entry #4 by Caseman on Jan 6, 2003 10:41 am

The problem AFAIK is that all DAV requests come in through manage_FTPget which is protected by the "FTP access" permission. I'm sure it is solvable, but not as a very quick fix.

-Casey
________________________________________
= Comment - Entry #3 by chrisw on Jan 6, 2003 10:12 am

Doesn't appear to be a simple permission mis-spelling.
I'm at a loss.
Does anyone else have any idea what's going on here?
________________________________________
= Comment - Entry #2 by chrisw on Sep 17, 2002 6:36 pm

Actually, this appears to definitely affect page templates, dtml documents and dtml methods.

It does not affect files and python scripts.

I'm guessing there's some 'interesting' permissions declarations somewhere ;-)

Chris
________________________________________
= Request - Entry #1 by chrisw on Sep 17, 2002 6:32 pm

The title pretty much sums it up.
You can have all the WebDAV permissions mapped and still not be able to access resources via WebDAV. The 'FTP access' permission is required.

Now, I can guess why this is (WebDAV requests actually end up being handled as FTP PUT/GET's) but this is pretty counter intuitive, undocumented and does prevent you giving access via WebDAV and not FTP unless you disable the FTP server.
==============================================================