[Zope] rename objects permission
Thu, 3 May 2001 17:02:30 +0200
----- Original Message -----
From: "Casey Duncan" <firstname.lastname@example.org>
To: "Peter Bengtsson" <email@example.com>
Cc: "Dieter Maurer" <firstname.lastname@example.org>; <email@example.com>
Sent: Thursday, May 03, 2001 4:44 PM
Subject: Re: [Zope] rename objects permission
> Peter Bengtsson wrote:
> > Ok. New question! This is very strange.
> > I create a user called "monkey" in a folder called "icons".
> > The "monkey" user has the "foodexpert" role.
> > These permissions are ticked for the foodexpert role:
> > - Access contents information
> > - Add Documents, Images, and Files
> > - Change Images and Files
> > - Delete objects
> > - Manage properties
> > - View
> > - View management screens
> > All I want the monkey to be able to do is to add/edit (name and
> > properties)/remove Image objects in a folder called "icons".
> > The monkey fills in a form to upload an Image (a copy of the
> > form almost). When submitting this DTML code is called:
> > <dtml-call "PARENTS.manage_addImage(REQUEST['id'], REQUEST['file'])">
> > Simple, isn't it? But it does NOT work!
> > "You are not authorized to access manage_addImage. "
> > Fuck! the monkey things. Goes /manage and can select Add Image from the
> > down list and can add Images with no problem.
> > However, I want the monkey to be able to do these simple things using MY
> > management interface.
> > Is this a bug?
> > Peter
> Assuming action is a DTML method, you do not need PARENTS. That is
> likely the cause of the problem. I think it is trying to add the image
> to the parent folder of the icons folder. Try removing it.
The behaviour persists when I try without PARENTS.
<dtml-call "manage_addImage(REQUEST['id'], REQUEST['file'])">
...does NOT either work.
Thanks for the support.
> | Casey Duncan
> | Kaivo, Inc.
> | firstname.lastname@example.org
> Zope maillist - Zope@zope.org
> ** No cross posts or HTML encoding! **
> (Related lists -
> http://lists.zope.org/mailman/listinfo/zope-dev )