[Zope] Tree Help

Dieter Maurer dieter@handshake.de
Wed, 15 Aug 2001 21:07:10 +0200 (CEST)


Todd Loomis writes:
 > I'm trying to create a file system with access control, however when I 
 > login as some who shouldn't see everything I still do. Here's my code:
 > ....
 > <dtml-tree folders branches_expr="objectValues()" sort=title_or_id single=1 
 > nowrap=0 skip_unauthorized=1>
The "authorization" check employed by "dtml-tree" is too weak.
Replace "objectValues" by a call to "ZopeFind" with correct
arguments for "obj_permission" and "obj_roles"....


Dieter