[Zope] Security question...

[David Hassalevris]

Can't you hide or show the "previous menu" based on something like:

<dtml-unless  "SecurityGetUser() .getUserName() in  ignoreUserList">
  put up that report option ...
</dtml-unless>

note: ignoreUserList is a list like:  ['george','harry']  

Then users in the ignoreUserList will never see the menu option.

Simple, but I've used this approach in my projects.

David

  
----- Original Message ----- 
From: <pskipwort@touchcorp.com>
To: <H.de.Wit@SFK.NL>; <zope@zope.org>
Sent: Tuesday, January 28, 2003 3:11 PM
Subject: RE: [Zope] Security question...


> Thanks Hans...
> 
> It's nearly what I want...except the report will still be visible on the 
> previous menu - I guess the user would be able to click on it, but they 
> would be redirected to another page. It's a bit dirty - I wish there was 
> a better option! I'll keep fiddling :)
> 
> P
> 
> 
> -----Original Message-----
> From: H.de.Wit@SFK.NL [mailto:H.de.Wit@SFK.NL]
> Sent: Tuesday, 28 January 2003 7:56 PM
> To: Peter Skipworth; zope@zope.org
> Subject: Re: [Zope] Security question...
> 
> 
> 
> It is a little cheap, but this should work:
> You can exclude the two users (it is 1 report, isn't?) by adding a call 
> to
> a pythonscript to your report.
> content of the pythonscript something like this:
> 
> from AccessControl import getSecurityManager
> user = getSecurityManager().getUser()
> if user=="George" or name=="Saddam":
>   target='www.friendsforever.org'
>   RESPONSE.redirect(target)
>   return  # i don't know why, but this return seems to be necessary.
> 
> Hans de Wit
> Stichting Farmaceutische Kengetallen
> Postbus 30460
> 2500 GL  DEN HAAG
> Tel. 070-3737448
> Fax 070-3737445
> 
> 
> |---------+--------------------------->
> |         |           pskipwort@touchc|
> |         |           orp.com         |
> |         |           Sent by:        |
> |         |           zope-admin@zope.|
> |         |           org             |
> |         |                           |
> |         |                           |
> |         |           28-01-2003 05:36|
> |         |                           |
> |---------+--------------------------->
>   
> >-----------------------------------------------------------------------
> ------------------------------------------------------------------------
> ---|
>   |                                                                      
>                                                                          
>    |
>   |        To:      zope@zope.org                                        
>                                                                          
>    |
>   |        cc:                                                           
>                                                                          
>    |
>   |        Subject: [Zope] Security question...                          
>                                                                          
>    |
>   
> >-----------------------------------------------------------------------
> ------------------------------------------------------------------------
> ---|
> 
> 
> 
> 
> I thought this might be in the FAQ, but can't seem to find it in
> there...
> 
> I have a particular report which I want "Everyone with Role 'A' to be
> able to View except for users U1 and U2'
> 
> I do not want to remove U1 and U2 from Role A globally - is there an
> easy of of locally removing 'View' permission for 2 specific users, and
> retain View permissions for other users sharing the role ?
> 
> Thanks,
> 
> P
> 
> 
> PETER SKIPWORTH
> SYSTEM ADMINISTRATOR
> TOUCHCORP LTD
> TELEPHONE 03 9635 2626
> www.touchcorp.com
> 
> 
> 
> 
> _______________________________________________
> Zope maillist  -  Zope@zope.org
> http://lists.zope.org/mailman/listinfo/zope
> **   No cross posts or HTML encoding!  **
> (Related lists -
>  http://lists.zope.org/mailman/listinfo/zope-announce
>  http://lists.zope.org/mailman/listinfo/zope-dev )
> 
> 
> 
> 
> 
> 
> _______________________________________________
> Zope maillist  -  Zope@zope.org
> http://lists.zope.org/mailman/listinfo/zope
> **   No cross posts or HTML encoding!  **
> (Related lists - 
>  http://lists.zope.org/mailman/listinfo/zope-announce
>  http://lists.zope.org/mailman/listinfo/zope-dev )
> 
> 
> _______________________________________________
> Zope maillist  -  Zope@zope.org
> http://lists.zope.org/mailman/listinfo/zope
> **   No cross posts or HTML encoding!  **
> (Related lists - 
>  http://lists.zope.org/mailman/listinfo/zope-announce
>  http://lists.zope.org/mailman/listinfo/zope-dev )