Re: [Zope] Security problem?

2000-12-07 Thread Chris Withers
Might be a security problem... Are you allowed to access that header from inside your index_html? cheers, Chris Andreas Jung wrote: Inside a product my index_html is set to "index_html=HTMLFile('index_html',globals())" The index_html.dtml calls dtml-var standard_html_header. This

[Zope] Security Problem

2000-08-03 Thread Sven Hohage
Hi, I've got two questions. 1.Is Zope 2.2.0 masking the length of the passwords? 2. the more important- I'm using a method to change properties by form. The user i.e. Tim has the role manager in the highest user_folder and acquisition is kept but Zope tells me that the user is not authorized.

[Zope] Security problem i 2.2 final - Bug?

2000-07-19 Thread Peter Arvidsson
I have a very anoying problem... I have created a news-product and have several news-objects. Now I want to change the properties of a news-object. This is my code for that: dtml-with "newsEntries" dtml-call "_[objId].propertysheets[1].manage_editProperties(

Re: [Zope] Security problem i 2.2 final - Bug?

2000-07-19 Thread Pierre Rougier
Hi :) I may say something idiot, but... Did u try to change the proxy roles of the method which call the fonction manage_editProperties? (in case of: to do it, edit your method and choose proxy at the top of the window), u can edit the role of your method. Piotr. Peter Arvidsson wrote: I

Re: [Zope] Security problem i 2.2 final - Bug?

2000-07-19 Thread Peter Arvidsson
Hi Thanks for the tip. I gave the method the correct roles but unfortunatelty the problem still exists. Peter Pierre Rougier skrev: Hi :) I may say something idiot, but... Did u try to change the proxy roles of the method which call the fonction manage_editProperties? (in case of: to

Re: [Zope] Security problem i 2.2 final - Bug?

2000-07-19 Thread Peter Arvidsson
Thats what I did .. same problem. However when I installed a new 2.2 final and did exactly the same (same stuff, same permissions) then it worked. There must be some problem with the upgrading... Peter Pierre Rougier skrev: Hi Just to see... try to give all the proxy roles to your