[Zope] Why I must set security-property "Access contents information" to get Data from Database?

[Andreas Pakulat]

On 15.Feb 2005 - 09:39:19, Chris Withers wrote:
> Dieter Maurer wrote:
> >>Well, then please explain why a stock zope instance behaves as I 
> >>described...
> >
> >I do not take orders ;-)
> 
> Fine, then keep on handing out bogus information based on reading code 
> rather than performing an empircal test.

He is right, the test on a stock zope using an image instead of a
template allows me to access that image. I even have access if I only
allow Anonymous to View the image.

> >Look at the code and tell me where my description of it deviates
> >from what you see...
> 
> Why don't you try following the steps I described, and then you can use 
> your great intellect to explain why it behaves as it does, rather than 
> as you say it should, or maybe tell me what I did wrong? ;-)

You did wrong ;-)

An empty PageTemplate (i.e. one that does not access it's parent or
anything) can be viewed as Anonymous User by setting the
View-Permission.

Andreas

-- 
This life is yours.  Some of it was given to you; the rest, you made yourself.