Re: [Zope] Security problem?

2000-12-07 Thread Chris Withers
Might be a security problem... Are you allowed to access that header from inside your index_html? cheers, Chris Andreas Jung wrote: > > Inside a product my index_html is set to > >"index_html=HTMLFile('index_html',globals())" > > The index_html.dtml calls . This DTML method is > availab

[Zope] Security Problem

2000-08-03 Thread Sven Hohage
Hi, I've got two questions. 1.Is Zope 2.2.0 masking the length of the passwords? 2. the more important-> I'm using a method to change properties by form. The user i.e. Tim has the role manager in the highest user_folder and acquisition is kept but Zope tells me that the user is not authorized. Wh

Re: [Zope] Security problem i 2.2 final - Bug?

2000-07-19 Thread Peter Arvidsson
Thats what I did .. same problem. However when I installed a new 2.2 final and did exactly the same (same stuff, same permissions) then it worked. There must be some problem with the upgrading... Peter Pierre Rougier skrev: > Hi > > Just to see... try to give all the proxy roles to your method

Re: [Zope] Security problem i 2.2 final - Bug?

2000-07-19 Thread Peter Arvidsson
Hi Thanks for the tip. I gave the method the correct roles but unfortunatelty the problem still exists. Peter Pierre Rougier skrev: > Hi :) > I may say something idiot, but... > > Did u try to change the proxy roles of the method which call the fonction > manage_editProperties? > (in case of:

Re: [Zope] Security problem i 2.2 final - Bug?

2000-07-19 Thread Pierre Rougier
Hi :) I may say something idiot, but... Did u try to change the proxy roles of the method which call the fonction manage_editProperties? (in case of: to do it, edit your method and choose proxy at the top of the window), u can edit the role of your method. Piotr. Peter Arvidsson wrote: > I ha

[Zope] Security problem i 2.2 final - Bug?

2000-07-19 Thread Peter Arvidsson
I have a very anoying problem... I have created a news-product and have several news-objects. Now I want to change the properties of a news-object. This is my code for that: 'newsEntries' is the folder where I store my news-objects. 'objId' is the id of the product as a string. Everytime