[Zope] permissions problem upgrading to 2.3.0a1 from 2.1.6

2001-01-10 Thread Jerome Alet 

Hi,

I've been using 2.1.6 for a long time without any problem, using a home
compiled python 1.5.2

Yesterday I've tried to upgrade to 2.3.0a1 the following way:

export each and every home made sites and products (ZClasses) from 2.1.6
stop 2.1.6
install 2.3.0a1 and start it
import each and every exported sites and products

(I've not tried using the same Data.fs as 2.1.6)

In all instances of a ZClass I've made, I used to (in 2.1.6) call a DTML
method from my browser which was protected in a way to display the
authentication box, allowing me to enter my username and password.

The username and password should give me a role created in the ZClass
instance constructor, this role is allowed to create and modify some
subobjects (another ZClass)

Since I've installed 2.3.0a1 then when I tell my browser to "call" the
DTML method the authentication box appears but I'm not able to
authenticate myself: it always give me an unauthorized exception.

Looking at zope log it gives me a 401 error on the DTML method.

If I modify this method to do nothing but return plain text the problem
persists. 

I've checked several times the username and password and I'm sure I've
typed them correctly.

In one instance of my ZClass I've tried to give all permissions to the
created role, but with no luck.

I've finally stopped 2.3.0a1 and relaunched the 2.1.6.
 
Does someone have any idea of where the problem may come from ?
Should I try to use the same Data.fs of 2.1.6 ?
Should I try to use 2.2.5 instead of 2.3.0a1 (I'd like to be able to use
PythonScripts) ?

Thanks in advance.

Jerome ALET - [EMAIL PROTECTED] - http://cortex.unice.fr/~jerome
Fac de Medecine de Nicehttp://wwwmed.unice.fr 
Tel: (+33) 4 93 37 76 30 Fax: (+33) 4 93 53 15 15
28 Avenue de Valombrose - 06107 NICE Cedex 2 - FRANCE


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] permissions problem upgrading to 2.3.0a1 from 2.1.6

2001-01-10 Thread Dieter Maurer 

Jerome Alet writes:
  ... permission problem upgrading ZClasses from 2.1.6 to 2.3a1 ...
Are your ZClasses pure Zope ZClasses or do they contain
Python based products?

There was a big shift in security policy during
Zope 2.1.x to Zope 2.2.x.
Many Python based products need to be changed in order
to be compatible with the new security policy.
This is excellently explained in a paper from Brian:
"... Upgrading to Zope 2.2 ..."

I do not expect, that the behavious will be different,
if you upgrade to 2.2.4.



Dieter


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] permissions problem upgrading to 2.3.0a1 from 2.1.6

2001-01-10 Thread Jerome Alet 

On Wed, Jan 10, 2001 at 09:49:53PM +0100, Dieter Maurer wrote:
 Jerome Alet writes:
   ... permission problem upgrading ZClasses from 2.1.6 to 2.3a1 ...
 Are your ZClasses pure Zope ZClasses or do they contain
 Python based products?

They contain some PythonMethods (not Scripts !), external methods,
but the method which poses a problem is pure DTML.

 There was a big shift in security policy during
 Zope 2.1.x to Zope 2.2.x.
 Many Python based products need to be changed in order
 to be compatible with the new security policy.
 This is excellently explained in a paper from Brian:
 "... Upgrading to Zope 2.2 ..."

I thought I've already read it IIRC, but I'll reread it more carefully ASAP.

Thanks for your help.

Jerome Alet

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )