[Zope] Re: Re. Zope Users and Roles

[Juan Pablo Romero]

Ups, I think I didn't explain myself clearly.

What I want is to restrict access to some specific file
('insert_field'). So, I created a user at some level above the location
of the file, and at root level created a role ('db_user'). Now I don't
want to restrict access to *all* files below the role level; that's way
I shouldn't modify the permissions of that folder. According to the zope
book, I only need to modify permissions of the object I do want to
restrict access. 

I did as you suggested, that is, changed 'view' field of 'insert_field'
(selected entry from 'db_user' role and deselected from all other
columns).

At this point I understand zope should allow access to 'insert_field'
only to users with the 'db_user' role. But it doesn't.

Oddly, If I assing 'manager' role to the user (instead of 'db_user'),
and change the 'view' line of 'insert_field' (check 'manager' entry,
uncheck all other columns), then zope does ask for password, and accept
the user (exactly what I want, but for 'db_user' role).

It seems that user created roles don't get the same treatment than
'system' roles.

Thanks for your patience.


  Juan Pablo


On Fri, 2002-04-19 at 00:34, Felipe E. Barousse B. wrote:
> Guess you misunderstood. 
> 
> You CAN create the role, in this case "db_user" at the level you want to
> have control of the user's access (as in "test" in your example) OR, in
> any level above that object "test", such as root level. You did it at
> root level , that is OK. 
> 
> Then, AT THE LEVEL WHERE YOU  CREATED THE ROLE, "test" or "root" level
> as propper, get into the security tab and check the following permissios
> for the role "db_user": 
> 
> Access contents informations 
> Use Database Methods 
> View 
> 
> Optionally uncheck the same permissions for the Anonymous role -at that
> level in case don't want/need public access to that object. 
> 
> Well, guess this clarifies the issue.
> 
> Felipe Barousse
> Bufete Consultor de Mexico - Piensa Technologies.
> www.piensa.com
> 
> 
> 
> >Message: 19 
> >Subject: Re: [Zope] Re: Zope Users and Roles 
> >From: Juan Pablo Romero <jpablo@perl.ajusco.upn.mx> 
> >To: zope@zope.org
> >Date: 18 Apr 2002 14:44:31 -0500 
> > 
> >Hi 
> > 
> >As you said, I added the role 'db_user' at root level. 
> > 
> >Now, where do I get the secury tab *for the db_user role*? 
> > 
> >I mean, I have tabs for all zope objects, such as folders, files, etc.,
> >but not for a role. 
> > 
> > 
> >  Juan Pablo