Thanks Douglas and Marius,<div><br></div><div>For the quick solution and the background. It's working fine.</div><div><br></div><div>Regards,</div><div>Lothar<br><br><div class="gmail_quote">2009/4/1 Marius Gedminas <span dir="ltr"><<a href="mailto:marius@gedmin.as">marius@gedmin.as</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div class="im">On Tue, Mar 31, 2009 at 02:09:34PM -0700, Douglas Cerna wrote:<br>
> Hi.<br>
><br>
> I had a similar error and fixed it modifying:<br>
><br>
> >>> browser.addHeader('Authorization', 'Basic mgr:mgrpw')<br>
><br>
> To:<br>
><br>
> >>> browser.addHeader('Authorization', 'Basic globalmgr:globalmgrpw')<br>
><br>
> Both principals are defined in the ftesting.zcml file of your project,<br>
> but just the globalmgr has the Manager role assigned.<br>
<br>
</div>This is intentional and tends to expose bugs in your application.<br>
<br>
If you have an object without a correct __parent__ chain leading to the<br>
ZODB root, your object will never see local security grants (such as<br>
mgr:mgrpw has) so any users defined TTW won't be able to access it.<br>
<br>
The fix is to ensure that *every* object of your application has a<br>
__parent__.<br>
<br>
(Note that this use of __parent__ for security is independent from<br>
containment -- you don't need your objects to provide ILocation, or have<br>
__name__'s -- the Zope 3 security mechanism looks at __parent__<br>
attributes without checking interfaces.)<br>
<br>
Marius Gedminas<br>
<font color="#888888">--<br>
Life begins when you can spend your spare time programming instead of<br>
watching television.<br>
-- Cal Keegan<br>
</font><br>-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v1.4.9 (GNU/Linux)<br>
<br>
iD8DBQFJ0wlZkVdEXeem148RAi35AJ9GkZv41wl7l/b3yjMFBdpB31++7gCdEYNF<br>
BM3jLvijYR1+AZFx2mLYvdc=<br>
=46qz<br>
-----END PGP SIGNATURE-----<br>
<br>_______________________________________________<br>
Zope3-users mailing list<br>
<a href="mailto:Zope3-users@zope.org">Zope3-users@zope.org</a><br>
<a href="http://mail.zope.org/mailman/listinfo/zope3-users" target="_blank">http://mail.zope.org/mailman/listinfo/zope3-users</a><br>
<br></blockquote></div><br></div>