[Zope] Re: verbose-security

[Tres Seaver]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jeremy Cook wrote:
> Thanks for answering, however I think that the problem is simply that
> verbose-security is not working. I have a new install of zope 2.8.6, I
> make a folder, I make index_html, I change the security on this so that
> it can only be read by manager. I go to error log and allow
> 'Unuathorized' to be logged, and then I try to access index_html.
> 
> All I then see in the log file is:
> 
> Exception traceback
> 
> 
> Time
> 2006/03/29 11:02:41.424 GMT+2
> User Name (User Id)
> Anonymous User (None)
> Request URL
> http://bla.bla/test/index_html
> Exception Type
> Unauthorized
> Exception Value
> <strong>You are not authorized to access this resource.</strong>
> 
> Traceback (innermost last):
> 
> Module ZPublisher.Publish, line 105, in publish
> Module ZPublisher.BaseRequest, line 461, in traverse
> Module ZPublisher.HTTPResponse, line 685, in unauthorized
> Unauthorized: <strong>You are not authorized to access this resource.</strong> 
> 
> 
> I somehow expected a more detailed description 'you need permissions blahdy bla' , and in this context you have 'da di da'
> 
> etc.
> 
> I think somehow verbose-security is not working for me. Has anyone tried it?

Just a guess, but be sure to enable the Python security policy, as well
as verbose security, in zope.conf:

  security-policy-implementation python
  verbose-security on



Tres.
- --
===================================================================
Tres Seaver          +1 202-558-7113          tseaver at palladion.com
Palladion Software   "Excellence by Design"    http://palladion.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFEKp3q+gerLs4ltQ4RAvYjAJ0RWMH8PreO9tskx/zP9ks3umL/OACcDFcW
o6wVtMEcjmEHtkXBZVVoZ3o=
=YuQy
-----END PGP SIGNATURE-----