-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dieter Maurer wrote: > Andreas Jung wrote at 2007-1-15 11:35 +0100: >> >> --On 15. Januar 2007 11:26:27 +0100 [EMAIL PROTECTED] wrote: >>> The actual access error is on 'manage_page_header' - I append the error >>> traceback. >>> >> Stuff that starts with 'manage_' always requires the Manager role. > > Where did you find this? > > In my view it is not and was never right... > There is not special protection for objects the name of which > starts with "manage_". > > A primary counter example are the hundreds of "constructors" > registered with "initializeClass" which traditionally are > named "manage_addXXXX[Form]" but are protected by "Add XXX permission" > which are often not restricted to "Manager" only.
App.class_init.default__class_init__ requires 'Manager' role for methods whose name is 'manage' and those which start with 'manage_', but only if they were otherwise unprotected. Tres. - -- =================================================================== Tres Seaver +1 540-429-0999 [EMAIL PROTECTED] Palladion Software "Excellence by Design" http://palladion.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v126.96.36.199 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFrSW++gerLs4ltQ4RAk71AKCGs18XZK4pHTRhzWUw6Zbq+w1s/gCeJp8/ iK8wyPgpLfqcxwLyt+0Z/KU= =WQqR -----END PGP SIGNATURE----- _______________________________________________ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )