RE: [Zope] Giving access to error_log.showEntry to non-Manager users

2007-01-18 Thread martin.gfeller

Stuff that starts with 'manage_' always requires the Manager role.

It seems that this is declared in App.Management.Navigation as:
security.declareProtected(view_management_screens,
'manage_page_header')

However, I found a way around: Using the call error_log/getLogEntryById
instead of the error_log/showEntry that is returned by error_log_url, I
get
the same information outside of the management screens (it only needs 
'Log Site Errors' permission.

Best regards,
Martin Gfeller

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Giving access to error_log.showEntry to non-Manager users

2007-01-16 Thread Dieter Maurer
Andreas Jung wrote at 2007-1-15 11:35 +0100:


--On 15. Januar 2007 11:26:27 +0100 [EMAIL PROTECTED] wrote:

 The actual access error is on 'manage_page_header' - I append the error
 traceback.


Stuff that starts with 'manage_' always requires the Manager role.

Where did you find this?

  In my view it is not and was never right...
  There is not special protection for objects the name of which
  starts with manage_.

  A primary counter example are the hundreds of constructors
  registered with initializeClass which traditionally are
  named manage_add[Form] but are protected by Add XXX permission
  which are often not restricted to Manager only.



-- 
Dieter
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Giving access to error_log.showEntry to non-Manager users

2007-01-15 Thread Andreas Jung



--On 15. Januar 2007 11:26:27 +0100 [EMAIL PROTECTED] wrote:


The actual access error is on 'manage_page_header' - I append the error
traceback.



Stuff that starts with 'manage_' always requires the Manager role.

-aj

pgpu2XxeOtI5p.pgp
Description: PGP signature
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )