[Zope] Please Help!

[Phil Harris]

Tom,

The simple answer is that the anonymous user doesn't have permission to
change properties.

But, there is a recognised technique for allowing 'him' to do so.

Proxy roles:

On the management screen for the storybulder method you'll see a tab marked
'proxy', click it and you'll be given a screen where you can set what role
will be active when an anonymous user accesses this method.

You need to set a role that has permission to change properties.  Try
setting it to 'Manager' in the first instance.

My preferred way of doing it though is to set up another role that has only
the *required* permissions, and then use that.  I'm a bit paranoid though ;)

Do a search on the Zope site for 'proxy roles' if you need anymore info.

hth

Phil
phil.harris@zope.co.uk

----- Original Message -----
From: "Tom Scheidt" <tom@falsemirror.com>
To: <zope@zope.org>
Sent: 05 April 2000 23:29
Subject: [Zope] Please Help!


> Ive created a folder that has 3 documents:
> --------------------------------------------------------
> story_html
> (a dtml document)
>
> Which has a <dtml-var story> that calls a property assigned to story_html
> The property, obviously is named "story".
> -------------------------------------------------------
> storyform
> ( dtml method)
>
> <form action="storybuilder" method="post" enctype="multipart/form-data">
>
> <table width=100% cellpadding=5 cellspacing=0 border=0>
> <tr> <td align=left valign="top">
>
> <b>Story id</b><br>
> <input type="text" name="new_id" size="25">
> <hr size=1>
>
> <b>New Story Name</b><br>
> <input type="text" name="new_story" size="25">
> <hr size=1>
>
> <tr>
> <td align=center>
> <input type="submit" value="create story"><br><br>
> </td>
> </tr>
>
> </table>
> </form>
> -------------------------------------------------------------
> storybuilder
> (a dtml method)
>
> <dtml-var standard_html_header>
>
> <dtml-with "manage_clone(story_html,REQUEST['new_id'],REQUEST)">
>
> <dtml-call "manage_changeProperties(title=REQUEST['new_id'],
>
> story=REQUEST['new_story'],
>
> )">
>
> </dtml-with>
>
> <dtml-call "RESPONSE.redirect('manage_main?update_menu=1')">
>
> Congratulations!
>
> <dtml-var standard_html_footer>
> ----------------------------------------------------------------
> My problem is this:
> I am a Manager of the site with full permissions, yet
> when I attempt to use the storyform to clone the story_html
> document and add the "New Story" text into the new
> document's properties I get a message that says:
> "You are not authorized to access manage_changeProperties"
>
> Can anyone please help me with this problem, I have
> been struggling for days with this and have absolutely no idea
> what can be causing the problem. Thanks in advance.
>
>
> *************************
> Tom Scheidt
> www.falsemirror.com
> tom@falsemirror.com
> *************************
>
>
> _______________________________________________
> Zope maillist  -  Zope@zope.org
> http://lists.zope.org/mailman/listinfo/zope
> **   No cross posts or HTML encoding!  **
> (Related lists -
>  http://lists.zope.org/mailman/listinfo/zope-announce
>  http://lists.zope.org/mailman/listinfo/zope-dev )