[Zope] rename objects permission

[Peter Bengtsson]

Ok. New question! This is very strange.

I create a user called "monkey" in a folder called "icons".
The "monkey" user has the "foodexpert" role.
These permissions are ticked for the foodexpert role:
- Access contents information
- Add Documents, Images, and Files
- Change Images and Files
- Delete objects
- Manage properties
- View
- View management screens

All I want the monkey to be able to do is to add/edit (name and
properties)/remove Image objects in a folder called "icons".
The monkey fills in a form to upload an Image (a copy of the manage_addImage
form almost). When submitting this DTML code is called:
<dtml-call "PARENTS[0].manage_addImage(REQUEST['id'], REQUEST['file'])">
Simple, isn't it? But it does NOT work!
"You are not authorized to access manage_addImage. "

Fuck! the monkey things. Goes /manage and can select Add Image from the drop
down list and can add Images with no problem.
However, I want the monkey to be able to do these simple things using MY
management interface.

Is this a bug?

Peter

----- Original Message -----
From: "Casey Duncan" <cduncan@kaivo.com>
To: "Peter Bengtsson" <mail@peterbe.com>
Cc: <zope@zope.org>
Sent: Wednesday, May 02, 2001 6:12 PM
Subject: Re: [Zope] rename objects permission


> Peter Bengtsson wrote:
> >
> > >
> > > I believe it would be "Manage Properties" although I could be wrong.
> >
> > Nops! Tried that.
> >
>
> After reading the all knowing source and experimenting here are the
> permissions you need:
>
> Access contents information
> View
> View Management Screens
> Delete Objects
> Add (Insert Object Type here)
>
> The last permission controls what types of objects can be renamed. There
> is no way to restrict access to the rename form, however, simply having
> View Management screens gives you that.
>
> --
> | Casey Duncan
> | Kaivo, Inc.
> | cduncan@kaivo.com
> `------------------>