[Zope] How to properly do navigation Bar without un-authorized sub-objects?

Casey Duncan cduncan@kaivo.com
Tue, 27 Feb 2001 09:15:29 -0700


Brad Clements wrote:

> > Did you try setting a proxy role on the ShowNavBar method that can
> > execute this?
> 
> No.. I don't want it to show if the logged in user doesn't have rights to it.
> 
> I want a way to see, in DTML (or an external method), if the current user
> has rights to an object.. if they have rights, does the object exist.
> 
> If they don't have rights, it's okay to raise an exception (AttributeError)
> which I can catch. But I don't want the SecurityManager to try to
> authenticate our access to it..
> 
> Brad Clements,                bkc@murkworks.com   (315)268-1000
> http://www.murkworks.com                          (315)268-9812 Fax
> netmeeting: ils://ils.murkworks.com               AOL-IM: BKClements


OK, how about if you call AUTHENTICATED_USER.has_permission() on each
NavBar method to see if the user has rights to call it?

-- 
| Casey Duncan
| Kaivo, Inc.
| cduncan@kaivo.com
`------------------>