[Zope] Fwd: Re: [Zope] Urgent: acquisition and permissions question.

2000-09-18 Thread Diego Rodrigo Neufert

Just put an index_html under protected folder
the user will get access denied...

On Mon, 18 Sep 2000, you wrote:
 Hello everybody
 
 Maybe the answer is easy, but I can not find the solution:(and maybe I was
 completly wrong about permissions)
 
 
 I have a folder containing SQLs and methods:
 /project
 and a subfolder who has his access and view security setting disable for
 anonymous:
 /project/protected
 
 When anonymous access /project/index_html  he see the page : that's good.
 1)When anonymous access /project/protected/index_html he also see the page.
  Is it normal?? ( the index_html is of course only inside the /project )
 
 2)If anonymous access /project/protected/some_method_with_sql and the result
 is empty, he see the result page!That's strange.
But if the result is not empty, he get the authentication box : that's
 good.
 
 It's zope2.2.1
 
 
 So can someone explain me the rules when an unprotected object is acquired
 from a protected folder??
 
 Thanks,
 
 Gilles
 
 
 ___
 Zope maillist  -  [EMAIL PROTECTED]
 http://lists.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists - 
  http://lists.zope.org/mailman/listinfo/zope-announce
  http://lists.zope.org/mailman/listinfo/zope-dev )

-- 
---
Diego Rodrigo Neufert
-webmaster
---
(Magic Web Design)
(email) ([EMAIL PROTECTED])
(curitiba) (pr)

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Fwd: Re: [Zope] Urgent: acquisition and permissions question.

2000-09-18 Thread Gilles Lavaux

Yes, I know, but I want to avoid duplicating methods. And I would like to
understand why it's not working as expected.

Gilles

-Original Message-
From: Diego Rodrigo Neufert [EMAIL PROTECTED]
To: [EMAIL PROTECTED] [EMAIL PROTECTED]
Date: Monday, September 18, 2000 5:36 PM
Subject: [Zope] Fwd: Re: [Zope] Urgent: acquisition and permissions
question.


Just put an index_html under protected folder
the user will get access denied...

On Mon, 18 Sep 2000, you wrote:
 Hello everybody

 Maybe the answer is easy, but I can not find the solution:(and maybe I
was
 completly wrong about permissions)


 I have a folder containing SQLs and methods:
 /project
 and a subfolder who has his access and view security setting disable for
 anonymous:
 /project/protected

 When anonymous access /project/index_html  he see the page : that's good.
 1)When anonymous access /project/protected/index_html he also see the
page.
  Is it normal?? ( the index_html is of course only inside the /project )

 2)If anonymous access /project/protected/some_method_with_sql and the
result
 is empty, he see the result page!That's strange.
But if the result is not empty, he get the authentication box : that's
 good.

 It's zope2.2.1


 So can someone explain me the rules when an unprotected object is
acquired
 from a protected folder??

 Thanks,

 Gilles


 ___
 Zope maillist  -  [EMAIL PROTECTED]
 http://lists.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
  http://lists.zope.org/mailman/listinfo/zope-announce
  http://lists.zope.org/mailman/listinfo/zope-dev )

--
---
Diego Rodrigo Neufert
-webmaster
---
(Magic Web Design)
(email) ([EMAIL PROTECTED])
(curitiba) (pr)

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )