[Zope] Using Access Rules

Dennis Allison allison at sumeru.stanford.EDU
Fri Apr 30 19:38:55 EDT 2004



On Fri, 30 Apr 2004, Chris McDonough wrote:

> On Fri, 2004-04-30 at 18:28, Dennis Allison wrote:
> > I want to add some special checking to prevent direct, through the web
> > access to authenticated users who, I discover, can get a second browser
> > window and move around the site from URL independent of access path.
[...] 
> you aren't, it's possible that you may be "fighting the framework" a
> little bit here and should maybe take a step back and see if there's a
> way to solve the problem using the builtin Zope security model.

There is one way, but the option of 10000 or more roles boggles the
imagination.




More information about the Zope mailing list