[Zope] ViewAndCopyOnly role

Bill Kerr kerrb@senet.com.au
Fri, 10 May 2002 16:11:42 +0930


From: "Dieter Maurer" <dieter@handshake.de>
> Bill Kerr writes:
>  > how should I set a role for users of a folder where they can view and
copy
>  > files only?
>  > I've set these permissions:
>  > View Management Screen (for seeing the files)
>  > Access Contents Info, View (for rendering the files)
>  > Add Doc, Images, Files (for copying the files)
>  >
>  > This almost works but the problem is that with Add Doc, Images, Files
(which
>  > I need for copying) the users can also add things to this folder and I
don't
>  > want them to be able to do this. I think I want a permission that
allows
>  > copying but not adding.

> If you mean "copy out", I think you need "Add Files" only at the
> destination and not the source.
>
> When you meant "copy in", I would say, your requirement is a bit
> inconsistent as a "copy in" is not that different from an "add".

 Dieter is correct about this
 After further experimentation I can't see how it is possible to setup the
sort of folder I want using Zope security. I've now eliminated all
permissions except for:
** View Management Screen (for seeing the files)
The problem is that users can CUT the files with this permission and paste
them somewhere else
If I don't use View Management Screen then the users can't see the files. If
I do use View Management Screen then they can cut them.
I just want the users to be able to see them (view only, not be able to cut
or modify) and copy them into their personal folders (at a lower level where
they have been given local management rights)
Can you do this with default zope security settings?

 The Book of Zope says (page 135)
"View Management screens:
"... This permission does not allow a user to do any more than view these
screens. Additional permissions must be granted for a user to be able to
add, edit, or delete objects..."
This is very misleading IMO, being able to cut and paste elsewhere does
allow the user to do more than view only
- Bill