[Zope] FW: Security question - precision

[Bocquillon Philippe]

Dieter,

Thanks for your answer. You are right: it seems there is a problem in
traversing back to the root (looking at the trace). However, my classes are
already inheriting from Acquisition.Implicit. So, this is not sufficient to
solve the problem.

Philippe

> -----Original Message-----
> From: Dieter Maurer [mailto:dieter@handshake.de]
> Sent: dimanche 28 octobre 2001 19:04
> To: Bocquillon Philippe
> Cc: 'zope@zope.org'
> Subject: Re: [Zope] FW: Security question - precision
> 
> 
> Bocquillon  Philippe writes:
>  > Zope refuses "add object" permission to any user having a 
> role other than
>  > Manager, i.e. Zope refuses to add objects in containers 
> whose classes are my
>  > proper classes (inheriting ObjectManager), even if I give 
> all permissions to
>  > these other roles, at root level and acquiring them.
>  > When a role adds these objects in _standard_ Zope Folders, 
> no problem, Zope
>  > permits it.
> Looks as if your classes do not inherit from
> "Acquisition.Implicit" (probably "Acquisition.Explicit" will
> work, too).
> 
> In such a case, the Zope security machinery is no longer able
> to traverse back to the root. Consequently, it rejects the
> request (more precisely, it uses its default role assignment,
> "Manager").
> 
> 
> Dieter
>