[Zope] Proxy Roles
Suneel Iyer
suneeli@pacsg.css.mot.com
Mon, 20 Mar 2000 18:50:21 -0600
--------------EB7698CD8DEB65988E4D49E2
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Hello all,
I have the following code fragment in a method called
CategoryCustomizationForm contained in the folder /News:
<dtml-if preferences_saved>
<hr>
<b> Your preferences have been saved </b>
<hr>
<dtml-call "manage_changeProperties(preferences_saved=0)">
</dtml-if>
where "preferences_saved" is a property of the folder /News.
In the folder /News, the security view verfies that the permission of
"Manage properties" is allowed only by those in the "Manager" role. In
order to allow all authenticated users to use
the "manage_changeProperties" method in "CategoryCustomizationForm", I
assigned the proxy role of "Manager" to "CategoryCustomizationForm".
However, zope still only allows users in the role of Manager to access
"manage_changeProperties" in my form. In other words, the proxy role
assigned to the method "CategoryCustomizationForm" failed to override
the permissions of its containing folder /News. As a temporary fix, I
gave the "Authenticated" role permission to "Manage properties" in
/News. This works with regards to allowing all authenticated users to
access "manage_changeProperties" in my form. However, in the long run, I
don't want all authenticated users having manager type access to all
properties of /News. I have this failure of proxy roles in other areas
of development too, such as dtml creation of folders via manage_clone.
Is there something I'm missing about how to use proxy roles? Thanks for
your time.
--
Suneel Iyer Email : suneeli@pacsg.css.mot.com
Software Engineer Phone : (847) 523-7259
Advanced Technology Software Operations Fax : (847) 523-3867
Motorola Cellular Subscriber Sector Pager : 1-800-759-8352, pin 1273286
600 North U.S. Hwy 45, MS AN363 or email 1273286@skytel.com
Libertyville, IL 60048-1286
--------------EB7698CD8DEB65988E4D49E2
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
<!doctype html public "-//w3c//dtd html 4.0 transitional//en">
<html>
Hello all,
<p>I have the following code fragment in a method called CategoryCustomizationForm
contained in the folder /News:
<p><dtml-if preferences_saved>
<br> <hr>
<br> <b> Your preferences have been saved </b>
<br> <hr>
<br> <dtml-call "manage_changeProperties(preferences_saved=0)">
<br></dtml-if>
<p>where "preferences_saved" is a property of the folder /News.
<p>In the folder /News, the security view verfies that the permission of
"Manage properties" is allowed only by those in the "Manager" role. In
order to allow all authenticated users to use
<br>the "manage_changeProperties" method in "CategoryCustomizationForm",
I assigned the proxy role of "Manager" to "CategoryCustomizationForm".
However, zope still only allows users in the role of Manager to access
"manage_changeProperties" in my form. In other words, the proxy role assigned
to the method "CategoryCustomizationForm" failed to override the permissions
of its containing folder /News. As a temporary fix, I gave the "Authenticated"
role permission to "Manage properties" in /News. This works with regards
to allowing all authenticated users to access "manage_changeProperties"
in my form. However, in the long run, I don't want all authenticated users
having manager type access to all properties of /News. I have this failure
of proxy roles in other areas of development too, such as dtml creation
of folders via manage_clone. Is there something I'm missing about how to
use proxy roles? Thanks for your time.
<br>
<pre>--
Suneel Iyer Email : suneeli@pacsg.css.mot.com
Software Engineer Phone : (847) 523-7259
Advanced Technology Software Operations Fax : (847) 523-3867
Motorola Cellular Subscriber Sector Pager : 1-800-759-8352, pin 1273286
600 North U.S. Hwy 45, MS AN363 or email 1273286@skytel.com
Libertyville, IL 60048-1286</pre>
</html>
--------------EB7698CD8DEB65988E4D49E2--