[Zope] getting a list of users from ACL_USERS
Dylan Reinhardt
zope at dylanreinhardt.com
Fri Oct 10 14:26:42 EDT 2003
On Fri, 2003-10-10 at 10:58, Derek S. Wilson wrote:
> But when I try it using a regular (non-manager/owner) it says:
>
> Error Type: Unauthorized
>
> Error Value: You are not allowed to access getUserNames in this
> context
>
> When I use the site manager, it works fine...
It seems reasonable, by default, that you wouldn't want to allow just
*anyone* to examine your user folder. :-)
Since you *want* non-default behavior, give this method a proxy role
that has sufficient permissions. Once you've got that, you may want to
restrict access to this method, granting use of it only to authenticated
users, for example.
HTH,
Dylan
More information about the Zope
mailing list