[ZCM] [ZC] 316/ 1 Request "Renaming objects breaks ownership"

Collector: Zope Bugs and Patches ... zope-coders@zope.org
Wed, 27 Mar 2002 17:07:03 -0500


Issue #316 Update (Request) "Renaming objects breaks ownership"
 Status Pending, Zope/bug medium
To followup, visit:
  http://collector.zope.org/Zope/316

==============================================================
= Request - Entry #1 by Anonymous User on Mar 27, 2002 5:07 pm

1) Got a folderish object A
2) Object A container a userfolder (exUserFolder in my case). e.g. A.acl_users
3) Userfolder contains user X (A.acl_users.X)
4) Subobjects of A are owned by X
5) Rename A to B
6) Ownership information will be (A.acl_users.X)
7) User A.acl_users.X can't be found (Because now it's B.acl_users.X
8) ZopeSecurityPolicy can't find the owner's userobject and objects are owned by 'Anonymous User'.
9) Taking away permissions from 'Anonymous User' (e.g. 'View') makes Object *somehow* inaccessable (can be managed, but can't be 'View'ed.

As a workaround, you can reclaim ownership of the renamed object (B formerly known as A) and all it's subobjects with some user who's got the 'Manager' role. 

It sucks somehow, though I'm relieved I found a workaround and will sleep well tonight :-)

I'm not marking this as security related, because it doesn't make objects accessible but rather inaccessible instead. 
==============================================================