[Zope] Fwd: Re: [Zope] Urgent: acquisition and permissions question.

Gilles Lavaux gilles.lavaux@esrin.esa.it
Mon, 18 Sep 2000 18:00:40 +0200


Yes, I know, but I want to avoid duplicating methods. And I would like to
understand why it's not working as expected.

Gilles

-----Original Message-----
From: Diego Rodrigo Neufert <diego@magicwebdesign.com.br>
To: zope@zope.org <zope@zope.org>
Date: Monday, September 18, 2000 5:36 PM
Subject: [Zope] Fwd: Re: [Zope] Urgent: acquisition and permissions
question.


>Just put an index_html under protected folder....
>the user will get access denied...
>
>On Mon, 18 Sep 2000, you wrote:
>> Hello everybody
>>
>> Maybe the answer is easy, but I can not find the solution:(and maybe I
was
>> completly wrong about permissions)
>>
>>
>> I have a folder containing SQLs and methods:
>> /project
>> and a subfolder who has his access and view security setting disable for
>> anonymous:
>> /project/protected
>>
>> When anonymous access /project/index_html  he see the page : that's good.
>> 1)When anonymous access /project/protected/index_html he also see the
page.
>>  Is it normal?? ( the index_html is of course only inside the /project )
>>
>> 2)If anonymous access /project/protected/some_method_with_sql and the
result
>> is empty, he see the result page!That's strange.
>>    But if the result is not empty, he get the authentication box : that's
>> good.
>>
>> It's zope2.2.1
>>
>>
>> So can someone explain me the rules when an unprotected object is
acquired
>> from a protected folder??
>>
>> Thanks,
>>
>> Gilles
>>
>>
>> _______________________________________________
>> Zope maillist  -  Zope@zope.org
>> http://lists.zope.org/mailman/listinfo/zope
>> **   No cross posts or HTML encoding!  **
>> (Related lists -
>>  http://lists.zope.org/mailman/listinfo/zope-announce
>>  http://lists.zope.org/mailman/listinfo/zope-dev )
>
>--
>---------------------------
>Diego Rodrigo Neufert
>-webmaster
>---------------------------
>(Magic Web Design)
>(email) (diego@magicwebdesign.com.br)
>(curitiba) (pr)
>
>_______________________________________________
>Zope maillist  -  Zope@zope.org
>http://lists.zope.org/mailman/listinfo/zope
>**   No cross posts or HTML encoding!  **
>(Related lists -
> http://lists.zope.org/mailman/listinfo/zope-announce
> http://lists.zope.org/mailman/listinfo/zope-dev )
>
>