[Zope-dev] Re: [Zope] Re: Not authorized to access binding

Antonio Beamud Montero antonio.beamud at linkend.net
Thu May 25 14:38:55 EDT 2006


El jue, 25-05-2006 a las 12:49 -0400, Tres Seaver escribió:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> Your template uses 'here', which is and alias for the 'context' binding,
> i.e. the object through which the template was acquired.  That object
> has permission settings which prevent anonymous access *to the object*,
> which makes its use in a path expression impossible, even though the
> 'absolute_url' method of that object *would* be accessible by anonymous.
> 
> If this template needs to be renderable by anonymous users even for
> contexts to which they do not have access, then you can give the
> template a proxy role which *does* have access.  Use with caution, and
> double check that the template won't expose any data which *should* be
> protected.

How I can do it in the Product code? I cannot find in the API...

A lot of thanks

> 
> Tres.
> - --
> ===================================================================
> Tres Seaver          +1 202-558-7113          tseaver at palladion.com
> Palladion Software   "Excellence by Design"    http://palladion.com
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.1 (GNU/Linux)
> Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
> 
> iD8DBQFEdeA0+gerLs4ltQ4RAh8NAJ4x4u6UZ1L56x60f6gaXUzV/yX6igCcCEFV
> 2ug9atblCMjSgqPiYtU6nOI=
> =2Cnb
> -----END PGP SIGNATURE-----
> 
> _______________________________________________
> Zope maillist  -  Zope at zope.org
> http://mail.zope.org/mailman/listinfo/zope
> **   No cross posts or HTML encoding!  **
> (Related lists - 
>  http://mail.zope.org/mailman/listinfo/zope-announce
>  http://mail.zope.org/mailman/listinfo/zope-dev )



More information about the Zope-Dev mailing list