[Zope] Scripts run as least privileged user necessary?

Jamie Heilman jamie at audible.transient.net
Fri Aug 29 14:19:09 EDT 2003


Ken Causey wrote:
> I'm running into a strange problem.  I have a situation in which I want
> a script to treat Managers differently than other users.  But I'm
> finding that whether or not I'm logged in as a manager or not the script
> only considers the user to be 'Anonymous User' as long as 'Anonymous'
> has View privilege for the script.

This is a FAQ and is related to how HTTP works.  Requests are
(generally) first sent without authorization credentials, if the
response is 401 then the user agent will resend the request with
creds (after obtaining them from the user if necessary).

-- 
Jamie



More information about the Zope mailing list