[Zope] dtml-in and skip_unauthorized not working?

Mike Renfro renfro@tntech.edu
Thu, 9 Aug 2001 16:00:22 -0500


On Thu, Aug 09, 2001 at 02:42:39PM -0600, Casey Duncan wrote:

> Does anonymous by any chance have the "Access contents information"
> permission on these objects (or any others)? I suspect it must if it can
> display the titles.

Anonymous has Access contents defined in the root folder, and it's
acquired throughout the site. Without that, I'd have considerable
trouble querying any title or other properties anywhere, right?

For the short term, I've put a permissions check in the python script
before it appends to the object list. It works, at least.

So the idea is that I'm falling back to Anonymous access, and since I
have Access contents permission defined there, it's working? How would
I change the permission it checks to 'View', for example?

-- 
Mike Renfro  / R&D Engineer, Center for Manufacturing Research,
931 372-3601 / Tennessee Technological University -- renfro@tntech.edu