[Zope] How to properly do navigation Bar without un-authorized
sub-objects?
Casey Duncan
cduncan@kaivo.com
Tue, 27 Feb 2001 09:15:29 -0700
Brad Clements wrote:
> > Did you try setting a proxy role on the ShowNavBar method that can
> > execute this?
>
> No.. I don't want it to show if the logged in user doesn't have rights to it.
>
> I want a way to see, in DTML (or an external method), if the current user
> has rights to an object.. if they have rights, does the object exist.
>
> If they don't have rights, it's okay to raise an exception (AttributeError)
> which I can catch. But I don't want the SecurityManager to try to
> authenticate our access to it..
>
> Brad Clements, bkc@murkworks.com (315)268-1000
> http://www.murkworks.com (315)268-9812 Fax
> netmeeting: ils://ils.murkworks.com AOL-IM: BKClements
OK, how about if you call AUTHENTICATED_USER.has_permission() on each
NavBar method to see if the user has rights to call it?
--
| Casey Duncan
| Kaivo, Inc.
| cduncan@kaivo.com
`------------------>