[Zope] Re: Zope Permissions

[Anonymous Coward]

------- On Mon, 13 Sep 1999 17:34:23, Katrin
<katrin@beehive.de> wrote:

> hi everybody!
>
> i have a little problem with permission settings.
>
> i'm writing a product in python. the product
installs dtml methods when
> installed in a folder. now i want zope to ask for
the user name and the
> password when a certain page is rendered as an URL
(zope doesn't have a user name yet).
>
>i found out that in order to get the zope login
window, i have to uncheck the view permission of the
page (i mean the checkbox for
> acquire
permission settings). how can i uncheck the box using
python in my
>product? or how can i delete the view permission for
this page in my
> product?

If I understand your problem correctly, you want to
install the DTML method to have the acquired
permissions for View permission unchecked, and then  
(I guess,) enabled view permission for some role which
you have defined a set of users for?

I did something like this with some Python code in a
homegrown user authentication class I've been playing
around with:

        # remove view and access permissions from 
acquired permissions and anonymous role
        acq_permissions =
your_method.permission_settings()
        new_permissions = []
        for d in acq_permissions:
            if d['name'] != 'View':
                new_permissions.append(d['name'])
       
your_method.manage_acquiredPermissions(new_permissions)
       
your_method.manage_role(role_to_manage='Anonymous',permissions=new_permissions)

(Note: I dont know if the python code is formatted
correctly in the email message)

Basically, what it is doing is:

   1. get the current list of acquired permissions
from your dtml_method (<object>.permission_settings())

   2. create a new list of permissions without the
View permission (that's the what the loop is doing) --
you could also just create a hardcoded list and not
have to  loop (then you don't have to do the first
step too)

   3. set your object's acquired permissions using
(<object>.manage_acquiredPermissions(new_permissions)

   4. set the anonymous role's permissions to the
the new permissions (w/o the View permission)
(<object>.manage_role(role_to_manage='Anonymous',permissions=new_permissions))

You also probably need add a step to add view
permissions for some role (i.e. Manager) so that they
have the view permission to access your method using
the manage_role method
(<object>.manage_role(role_to_manage='Manager',permissions=['View','View
Management',...])

If you are writing your constructor method in DTML,
you
probably could use the same methods that I used. The
only complication I see in writing it with DTML is
implementing the loop (which could be circumvented if
you use a hardcoded list)...

Hope this helps.

Best regards,

Butch Landingin
butchland@yahoo.com

__________________________________________________
Do You Yahoo!?
Bid and sell for free at http://auctions.yahoo.com