[Zope-dev] fixing security problems HOW?

[Shane Hathaway]

Robin Becker wrote:
> 
> How can I find out exactly what is causing my security permissioning to
> fail.
> 
> I have put extra stuff into ZPublisher\BaseRequest.py at line 463 so I
> know that I'm failing on
> 
> UnauthorizedYou are not authorized to access this resource.
> URL='http://192.168.0.4:7080/live/index_html' No Authorization header
> found.
> 
> I am an anonymous user. Even when I make /live have the same permissions
> as the manager I can't make it work. index_html is a dtml method of the
> class of which live is an instance.
> 
> How can I figure out what is blocking the anonymous access.

1) Use the -D option to start Zope in debugging mode.

2) Install ZDebug.

3) Add a user with the essential permissions and see if *that* user can
get access.

Shane