Hi All, I am having a problem with permissions and security in zope.app.ftp
The writable method in FTPView basically uses adapter lookup on IWriteFile and tests this adapter if it has a 'write' attribute in order to test if a user can write to the specified file.
The problem is this seems to be always true (assuming the user has permission to list the names in the directory otherwise an Unauthorized exception is thrown, (this is my next problem to fix). The adapter configuration for IWriteFile in zope.app.file has the permission of zope.ManageContent on it. But has far has I can see this permission is only tested if, in this case the write method, is called.
So how do I get this writable method to work correctly, by reimplementing it or via some ZCML trick that I am unaware of.
Thanks Michael Kerrin 55 Fitzwilliam Square, Dublin 2 Ireland Tel: 353 (0) 87 688 3894 _______________________________________________ Zope3-dev mailing list Zope3-dev@zope.org Unsub: http://mail.zope.org/mailman/options/zope3-dev/archive%40mail-archive.com
