One key point I was missing here was that I am using GUF. I patched GUF to
do:
def getUserById(self, id, default=''):
"""Return the user corresponding to the given id.
"""
try: return self.getUser(id)
except: raise 'LoginRequired', loginScreen
Doing anything with the Security Model makes me nervous. Especially since I
fiddled with default=_marker from the original User.py.
This seems to work but any feedback from security guru's would be
appreciated.
- Original Message -
From: "Andy McKay" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, September 12, 2000 6:03 PM
Subject: [Zope] Ownership and security
> How do I remove ownership from a product, ie: make it unowned?
>
> I have some dtml that works quite happily on unowned objects, but at soon
as
> they become owned I get into a whole whack of problems with getUserById.
Of
> course I would really love to have ownership work, but I know its hell
> trying to explain it on a mailing list.
>
> --
> Andy McKay, Developer.
> ActiveState.
>
>
> ___
> Zope maillist - [EMAIL PROTECTED]
> http://lists.zope.org/mailman/listinfo/zope
> ** No cross posts or HTML encoding! **
> (Related lists -
> http://lists.zope.org/mailman/listinfo/zope-announce
> http://lists.zope.org/mailman/listinfo/zope-dev )
>
___
Zope maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope-dev )