Re: [Zope] How to change Unauthorized error message?

2000-09-29 Thread Chris Withers
Andy McKay wrote: > Sure I suppose. How of course to implement this is another issue, as errors > get thrown up to /lib/python/ZPublisher/HTTPResponse.py and it would be get > to trap them before then. Well, that's what Tres Seaver thought: http://classic.zope.org:8080/Collector/1049/view (he m

Re: [Zope] How to change Unauthorized error message?

2000-09-28 Thread Andy McKay
> Andy McKay wrote: > > Well if an anonymous user was allowed access to none of your site except > > standard_error_message that would sound like a security hole some person > > with a warped mind on these issues could use. > > I don't think so... the site designer just has to remember that object

Re: [Zope] How to change Unauthorized error message?

2000-09-28 Thread Chris Withers
Andy McKay wrote: > Well if an anonymous user was allowed access to none of your site except > standard_error_message that would sound like a security hole some person > with a warped mind on these issues could use. I don't think so... the site designer just has to remember that object is anonymo

Re: [Zope] How to change Unauthorized error message?

2000-09-28 Thread Andy McKay
> Andy McKay wrote: > > > > Some errors do not get caught by the standard_error_message and there are > > very good reasons for that. > > Oh really? ;-) Well if an anonymous user was allowed access to none of your site except standard_error_message that would sound like a security hole some perso

Re: [Zope] How to change Unauthorized error message?

2000-09-28 Thread Chris Withers
Andy McKay wrote: > > Some errors do not get caught by the standard_error_message and there are > very good reasons for that. Oh really? ;-) > The easiest way to do it so far is to hack the > source code where that message is printed to produce something nice. Hmmm... not pretty, especially if

Re: [Zope] How to change Unauthorized error message?

2000-09-28 Thread Andy McKay
Some errors do not get caught by the standard_error_message and there are very good reasons for that. The easiest way to do it so far is to hack the source code where that message is printed to produce something nice. - Original Message - From: "jensebaer" <[EMAIL PROTECTED]> To: <[EMAIL