Re: [Zope-dev] Enhanced permissions for DTMLMethod and DTMLDocument?

2000-08-29 Thread R. David Murray

On Tue, 29 Aug 2000, Christopher J. Kucera wrote:
> I've got a question about permissions of DTMLMethods and DTMLDocuments.  It
> seems to me that if you've given a role the "View management screens"
> permission, any user with that role should be able to view the source code
> for Methods and Documents.  Is there any concurrence here?

No. 

> I can understand if you don't want that kind of feature bundled in with
> "View management screens," but if that's the case then I think there should
> be a different role that grants these permissions.

My understanding (which may be wrong!) is that 'View management screens'
gives one permission (by convention?) to use 'manage_' methods.  *Which*
manage methods you can use (or even see on the management tabs) is
controlled by other permissions.  So if such an auxiliarry permission
for viewing the contents doesn't exist, it probably would be
useful to create it.  But I don't think view management screens
should automatically give you access to the source code.

--RDM


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




[Zope-dev] Enhanced permissions for DTMLMethod and DTMLDocument?

2000-08-29 Thread Christopher J. Kucera

'ello, everyone!

I've got a question about permissions of DTMLMethods and DTMLDocuments.  It
seems to me that if you've given a role the "View management screens"
permission, any user with that role should be able to view the source code
for Methods and Documents.  Is there any concurrence here?

I can understand if you don't want that kind of feature bundled in with
"View management screens," but if that's the case then I think there should
be a different role that grants these permissions.

I've posted this on the Collector (with patches) at:
http://classic.zope.org:8080/Collector/1570/view
but I wanted to see if anyone had anything else to say about it, too. :)

Thanks for your time!
-CJ

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )