[Zope3-dev] Re: [Zope3-checkins] SVN: Zope3/trunk/src/zope/security/ When you get an Unauthorized error, now you can see the object in addition to

[Roger Ineichen]

Hi Chris

> -----Original Message-----
> From: zope3-dev-bounces+dev=projekt01.ch at zope.org 
> [mailto:zope3-dev-bounces+dev=projekt01.ch at zope.org] On 
> Behalf Of Chris Withers
> Sent: Wednesday, February 23, 2005 9:09 AM
> To: Marius Gedminas
> Cc: zope3-dev at zope.org
> Subject: [Zope3-dev] Re: [Zope3-checkins] SVN: 
> Zope3/trunk/src/zope/security/ When you get an Unauthorized 
> error, now you can see the object in addition to
> 
> Marius Gedminas wrote:
> 
> > Log message for revision 29253:
> >   When you get an Unauthorized error, now you can see the 
> object in addition to
> >   the attribute and permission names in the traceback.
> >   
> >   Should a minor change like this be mentioned in doc/CHANGES.txt?
> 
> I do hope this is just a debug option?
> 
> On a production site, an unauthorized shouldn't show ANY of the 
> information you list above...

We are not in Zope2, there is no Traceback mapped in the Page Template
to the user. The Tracback is just shown in the log mechanism.

You can implement whatevery you whant if you get a Unauthorized error.
Let's say a simply page with a error message. Or in your case just a
message to the enduser. Simply register a browser:page with the permission 
zope.Public providing the IUnauthorizend interface.

It's so easy. We really don't have the hardcoded Zope2 solution anymore ;-)
Allmoste everything is up to you to reimplement if it doesn't fit the
default way.
This was nearly impossible in Zope2. <monky patch wink> 

Regards
Roger Ineichen

> Chris
> 
> -- 
> Simplistix - Content Management, Zope & Python Consulting
>             - http://www.simplistix.co.uk
> _______________________________________________
> Zope3-dev mailing list
> Zope3-dev at zope.org
> Unsub: 
> http://mail.zope.org/mailman/options/zope3-dev/dev%40projekt01.ch
> 
>