[Zope] TAL and Zope Security

Dieter Maurer dieter at handshake.de
Sun May 30 13:25:54 EDT 2004

patrick sullivan wrote at 2004-5-28 10:49 -0700:
>I am having some problems comprehending a security issue with zope and
>page templates.  I have a folder protected by exUserFolder, and that
>folder contains another folder where my site is sitting.  I have a page
>macro that all other pages use, so i just need to fill in slots of
>content throughtout the site.  
>i want to make a page available to Anonymous users.  But this page
>template contains calls to z sql methods, the page macro, some images, 
>etc etc etc.  I changed my Security permissions on this page tempalte
>for Anon to view and access object contents but i am still getting the
>authentication popup.  That didn't work.  So I gave anonymous
>everything in the security tab, and still no joy.  

Difficult security problems are best understood with
the "VerboseSecurity" product. For Zope 2.7, you
will need the CVS version.


More information about the Zope mailing list