[Zope] AUTHENTICATED_USER in zsql db connections?

[Paulo Eduardo Neves]

Jens Vagelpohl wrote:
> 
> hi jim,
> 
> <snippers>
> > Is there any way to accomplish this?  (I tried the obvious, making the
> > connection string be
> >       dbname@localhost AUTHENTICATED_USER
> > ; that didn't work... :)
> >
> <snippers>
> 
> this cannot work because when the user accesses the database through zope
> the connection is usually already there. it's a persistent connection that
> is opened right away. if your goal is to keep track of who does stuff you
> might do a dirty workaround and create another table in your database to
> capture the name of AUTHENTICATED_USER and other information needed and
> timestamp. important interactions (updates, inserts, etc) could write this
> info into the database by providing a second part to the ZSQL methods
> involved.
> 

To solve the access problem you can also have two DB connections. One with
the right to insert, delete, update and another just with select access. 
In the Zope security tab give anonymous access to the later and a special
role access to the first. You'd still have to log who's doing what.

hope this helps,
-- 
Paulo Eduardo Neves
maito:neves@email.com