[Zope3-Users] Grant role top zope.anybody

[Florian Lindner]

Am Samstag, 17. Februar 2007 23:35 schrieb Marius Gedminas:
> On Sat, Feb 17, 2007 at 12:48:05PM +0100, Florian Lindner wrote:
> > Hello,
> > I've tried to grant a role to zope.anybody (any user that visits the
> > site). Tried it this way:
> >
> >     <grant
> >         role = "my.role"
> >         principal = "zope.anybody"
> >     />
> >
> > But this gives a unknown principal id error, even though I have:
> >
> >   <unauthenticatedPrincipal
> >     id="zope.anybody"
> >     title="Unauthenticated User" />
> >
> > in my principal.zcml.
> >
> > How to do it right?
>
> ZCML is order-dependent (sadly).  You need to put your grant after the
> principal definition.  This means doing it in principals.zcml, or in
> some file that is included in site.zcml after principals.zcml.

The grant is contained in a security.zcml which is invoked from a 
configure.zcml from a package residing in the zope instance. I don't know 
about the order. Are the package configure.zcml invoked before 
principal.zcml?

Thanks,

Florian