[Zope] Don't delete your users without care...
Dieter Maurer
dieter@handshake.de
Wed, 30 Jan 2002 21:32:00 +0100
Florent Guillaume writes:
> Something I'd like to figure out when I have time is, why does the
> security machinery fail in such ways when the object is not owned by a
> valid user ?
The effective roles are the intersection of the current user's roles
and the one of the executing object's owner.
This is explained in the Zope Security documentation (--> zope.org).
A non-existing owner has no roles. The intersection is empty.
Consequence "Unauthorized".
Dieter