Hi Bill,

A dtml method with these lines:

<dtml-with "acl_users.getItem('z')">
<dtml-var password>
</dtml-with>

will show the password, despite that the methode is accessible by anonymous. Members in
my site is allowed to use dtml method. How can I prevent them from reading others'
properties?

Dirksen

__________________________________________________
Do You Yahoo!?
Yahoo! Photos - Share your holiday photos online!
http://photos.yahoo.com/

_______________________________________________
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )

Reply via email to