[Zope] Tree Help
Dieter Maurer
dieter@handshake.de
Wed, 15 Aug 2001 21:07:10 +0200 (CEST)
Todd Loomis writes:
> I'm trying to create a file system with access control, however when I
> login as some who shouldn't see everything I still do. Here's my code:
> ....
> <dtml-tree folders branches_expr="objectValues()" sort=title_or_id single=1
> nowrap=0 skip_unauthorized=1>
The "authorization" check employed by "dtml-tree" is too weak.
Replace "objectValues" by a call to "ZopeFind" with correct
arguments for "obj_permission" and "obj_roles"....
Dieter