[Zope] How to debug access denials?

2000-12-14 Thread Stephane Bortzmeyer
I have problem with Zope security model and I would like to know the best way to debug Zope when access is denied. I have two experimental sites: on one of them, anonymous users can go everywhere. On the other, the permissions *look* exactly the same but anonymous users can only see the home

Re: [Zope] How to debug access denials?

2000-12-14 Thread Chris Withers
Stephane Bortzmeyer wrote: Is there a way to get an extended log, such as "anonymous user denied because index_html called standard_html_header which called getData and getData is a database connection and they don't have permission to use database connections"? If you hit cancel when the

Re: [Zope] How to debug access denials?

2000-12-14 Thread Jerome Alet
On Thu, 14 Dec 2000, Chris Withers wrote: Stephane Bortzmeyer wrote: Is there a way to get an extended log, such as "anonymous user denied because index_html called standard_html_header which called getData and getData is a database connection and they don't have permission to use

Re: [Zope] How to debug access denials?

2000-12-14 Thread Stephane Bortzmeyer
On Thu, Dec 14, 2000 at 12:21:19PM +0100, Jerome Alet wrote: a python traceback in there which should provide the information you're looking for... Great, I missed it. May I add: "... in an incredibly unreadable and hardly understandable format." ? Indeed. What am I supposed to do

Re: [Zope] How to debug access denials?

2000-12-14 Thread Dieter Maurer
Stephane Bortzmeyer writes: I have problem with Zope security model and I would like to know the best way to debug Zope when access is denied. I have two experimental sites: on one of them, anonymous users can go everywhere. On the other, the permissions *look* exactly the same but

Re: [Zope] How to debug access denials?

2000-12-14 Thread Dieter Maurer
Stephane Bortzmeyer writes: Indeed. What am I supposed to do with that? Why is the 'title' property of the object unauthorized? (The object itself is viewable by Anonymous.) I would expect "AccessContentsInformation" is relevant to access properties. I had to drop most of my DTML

Re: [Zope] How to debug access denials?

2000-12-14 Thread Jerome Alet
On Thu, 14 Dec 2000, Dieter Maurer wrote: I would expect "AccessContentsInformation" is relevant to access properties. I read from that, that you do not use DTML objects. For *them*, access to attributes is granted for the "View" permission. Apparently, this is not true for all