[Zope] NUXUserGroups Zope security

Florent Guillaume fg@nuxeo.com
Sun, 21 Jul 2002 18:23:01 +0200


In article <109986E0-983C-11D6-84BA-000393876536@bangor.ac.uk> you write:
> On Monday, July 15, 2002, at 10:38  pm, Chris Withers wrote:
> > Sion Morris wrote:
> >>
> >> This is what I'm attempting to use here:
> >>
> >> group=context.acl_users.getGroupById('OMT') #where 'OMT' is the name of
> >> the group.
> >> users = group.getUsers()
> >> return users
> >>
> >> except  an error is raised: "Error Value: You are not allowed to access
> >> getUsers in this context"!
> >
> > Does the person executing this script have the 'Manage Users' 
> > permission? If
> > not, have you tried giving the script a proxy role which has this 
> > permission?
> 
> The script returns the same error when executed by a user with manager 
> role and when the script has the manager proxy role.
> 
> I'm stumped.

Can you try to add a
    security.declareObjectProtected(ManageUsers)
just after the
    security = ClassSecurityInfo()
in the BasicGroup class ? (in UserFolderWithGroups.py)

Tell me if it works for you.


Florent


-- 
Florent Guillaume, Nuxeo (Paris, France)
+33 1 40 33 79 87  http://nuxeo.com  mailto:fg@nuxeo.com