[Zope3-Users] Permissions for updateOrder() on OrderedContainer

[Tom Dossis]

Arne Nordmann wrote:
> ----------------
>>>> A.updateOrder(['C', 'B'])
> Traceback (most recent call last):
> ...
> ForbiddenAttribute: ('updateOrder', <mypackage.cont.Cont object at
> 0x022244B0>
> -------------
> (object at 0x022244B0 is OrderedContainer 'A')
> 
> configure.zcml defines each used interface with permission
> 'ManageContent' and I'm logged in as 'Manager'. Accessing the method
> keys(), values(), etc. of the OrderedContainers is no problem. So what's
> the problem?

Hi, just confirming that you've included a directive for
IOrderedContainer, e.g.

<class class="mypackage.cont.Cont">
  ...
  <require
     permission="zope.ManageContent"
     interface="zope.app.container.interfaces.IOrderedContainer
     />
   ...