Re: [Zope-dev] un-own an object

2001-04-12 Thread R. David Murray

On Thu, 12 Apr 2001, Tim McLaughlin wrote:
> Ok, so imagine a DTML method has an owner, and as the docs say the method
> can do no more than the authenticated user and the owner's permissions
> combined.  So, now delete the owner.

No, it is the *intersection* of the two ownership sets, not the union
("combined").

> The DTML method will no longer be functional, since the owner does not
> exist, and has no permissions.  I found this to be true with ZClass

Not quite.  It will execute as if it were owned by nobody (the anonymous
user).  So it has very minimal privileges.

> constructors at least.  I believe that the method should take the
> permissions of the authenticated_user only in this scenario, but it does
> not.

Like I said (and the docs say), it is the interesection of the two
sets of privileges, so it is effectively just the permissions of
user nobody.

--RDM


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



Re: [Zope-dev] un-own an object

2001-04-13 Thread Chris Withers

"R. David Murray" wrote:
> 
> Like I said (and the docs say), it is the interesection of the two
> sets of privileges, so it is effectively just the permissions of
> user nobody.

This isn't very useful though ;-)

I ended up re-creating a whole folder tree just because I wanted to delete the
user who created them, and Zope 2.2.4 doesn't appear to have a 'Take Ownership'
button :-(

*grumbling*

Chris :-)

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] un-own an object

2001-04-13 Thread Tim McLaughlin

you can always do a copy and delete to take ownership... (albeit that may
cause other probs...)

my problem is that I need to be able to construct a zclass built by a user
who no longer exists.  My suspicion is that "nobody" does not have those
privileges, and so it seems that I may be SOL  :-(

-Original Message-
From: Chris Withers [mailto:[EMAIL PROTECTED]]
Sent: Friday, April 13, 2001 5:50 AM
To: R. David Murray
Cc: Tim McLaughlin; '[EMAIL PROTECTED]'
Subject: Re: [Zope-dev] un-own an object


"R. David Murray" wrote:
> 
> Like I said (and the docs say), it is the interesection of the two
> sets of privileges, so it is effectively just the permissions of
> user nobody.

This isn't very useful though ;-)

I ended up re-creating a whole folder tree just because I wanted to delete
the
user who created them, and Zope 2.2.4 doesn't appear to have a 'Take
Ownership'
button :-(

*grumbling*

Chris :-)

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] un-own an object

2001-04-13 Thread Tim McLaughlin

I meant create an instance of a ZClass owned by a user who no longer exists
(if my 'construct' word made no sense - haven't had coffee yet ;-) ).

-Original Message-
From: Tim McLaughlin 
Sent: Friday, April 13, 2001 7:31 AM
To: 'Chris Withers'; R. David Murray
Cc: Tim McLaughlin; '[EMAIL PROTECTED]'
Subject: RE: [Zope-dev] un-own an object


you can always do a copy and delete to take ownership... (albeit that may
cause other probs...)

my problem is that I need to be able to construct a zclass built by a user
who no longer exists.  My suspicion is that "nobody" does not have those
privileges, and so it seems that I may be SOL  :-(

-Original Message-
From: Chris Withers [mailto:[EMAIL PROTECTED]]
Sent: Friday, April 13, 2001 5:50 AM
To: R. David Murray
Cc: Tim McLaughlin; '[EMAIL PROTECTED]'
Subject: Re: [Zope-dev] un-own an object


"R. David Murray" wrote:
> 
> Like I said (and the docs say), it is the interesection of the two
> sets of privileges, so it is effectively just the permissions of
> user nobody.

This isn't very useful though ;-)

I ended up re-creating a whole folder tree just because I wanted to delete
the
user who created them, and Zope 2.2.4 doesn't appear to have a 'Take
Ownership'
button :-(

*grumbling*

Chris :-)

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



Re: [Zope-dev] un-own an object

2001-04-13 Thread Chris Withers

> I meant create an instance of a ZClass owned by a user who no longer
exists
> (if my 'construct' word made no sense - haven't had coffee yet ;-) ).

Well, the other option is that you can create a user with the same name and
the manager role...

cheers,

Chris


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] un-own an object

2001-04-14 Thread Dieter Maurer

Tim McLaughlin writes:
 > my problem is that I need to be able to construct a zclass built by a user
 > who no longer exists.  My suspicion is that "nobody" does not have those
 > privileges, and so it seems that I may be SOL  :-(
My memory says:

  everything under "control_panel" (this includes ZClasses)
  in unowned.

There is excellent documentation about Zope 2.2 security.
There, you should be able to check how reliable my memory
is.


Dieter

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



RE: [Zope-dev] un-own an object

2001-04-16 Thread Tim McLaughlin

Maybe you should into them more.  I think that they are underappreciated in
the Zope world.  Very rapid dev (although slower performance).  A large part
of the Python dev that I am doing is geared to making ZClasses more
powerful.  take a look at some of my proposals.  The events in particular
make ZClasses much more powerful.  http://www.zope.org/Members/tmclaugh
We've been using the event model for ZClass dev very effectively here at
BCS.  I'll be posting the event code soon.

Tim

-Original Message-
From: Chris Withers [mailto:[EMAIL PROTECTED]]
Sent: Monday, April 16, 2001 9:37 AM
To: Tim McLaughlin
Subject: Re: [Zope-dev] un-own an object


Ah well :-S Never been much fo a ZClass fan myself, anyway :-S

good luck,

Chris

Tim McLaughlin wrote:
> 
> except for in my case the user itself is an instance of a ZClass  (see
> ZUserFolder).  so it seems an impasse.  I can do a goofy cut and paste and
> that will work, but it's definitely on the wacked side.
> 
> thanks,
> Tim
> 
> -Original Message-
> From: Chris Withers [mailto:[EMAIL PROTECTED]]
> Sent: Friday, April 13, 2001 5:30 PM
> To: Tim McLaughlin; 'R. David Murray'
> Cc: [EMAIL PROTECTED]
> Subject: Re: [Zope-dev] un-own an object
> 
> > I meant create an instance of a ZClass owned by a user who no longer
> exists
> > (if my 'construct' word made no sense - haven't had coffee yet ;-) ).
> 
> Well, the other option is that you can create a user with the same name
and
> the manager role...
> 
> cheers,
> 
> Chris

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )