[Zope] Re: Permissions problem

[Tres Seaver]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jose Carlos Balderas Alberico wrote:
> Greetings.
> 
> I'm having a few problems with a mini application I recently developed with
> Zope. It has to do with the permissions settings. The idea behind my
> application is that it will only be used by one person. This person has his
> own username and password (there is an ACL Users folder within my
> application's folder, with this person's name, password and role).
> 
> My applicaction's directory hierarcy is as follows:
> 
> ---- Application main folder.
>      ---- Pages
>      ---- Lib
>           ---- Python
>           ---- SQL methods
> 
> The Application main folder has "View" permission for the role to which the
> user in the ACL Users folder belongs.
> 
> Everything seems to work right at first. This user is able to access the
> index page of the application,... but when he tries to navigate to a
> specific page (let's call it "main_gestion_html", he gets an insufficient
> permissions message.
> 
> The problem may lay in the fact that "main_gestion_html" uses data session
> variables, and most important of all, python methods from another
> application (let's call it ZVVB2), which is located outside the Application
> main folder. I tried creating a new ACL user in this other ZVVB2 folder...
> but I still get the same access denied message.
> 
> I really need help on this. I've been stuck with this for the last few days
> and I don't know what else to try.
> 
> Any input will be highly appreciated. Thank you so much for your time.
> Jose Carlos.

The Zope security policy requires that users accessing a protected
resource be defined in a user folder which is "in scope" -- i.e., the
user folder must be in a containment path which is "above" ZVV82 as a
parent or grandparent.


Tres.
- --
===================================================================
Tres Seaver          +1 540-429-0999          tseaver at palladion.com
Palladion Software   "Excellence by Design"    http://palladion.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFfVCR+gerLs4ltQ4RAl6eAJ9dhErXkvJdvSK6SKy+fbXq7RkIKgCeLACk
hVr7tCbChQ1Ri9qTG0NAIWA=
=Sn/J
-----END PGP SIGNATURE-----