Dieter Maurer wrote:

*HOWEVER* note that proxy roles are not passed to called objects.
Thus, "emaildetails.htm" does not run with proxy roles.
If it accesses objects from "admin folder", then you will
get an "Unauthorized".

A possible solution could be: let "sendDetail" access and process
all protected information and pass the results only (hopefully elementary
and therefor unrestricted) to the page template for formatting.
Let "sendDetail" then send the formatted message itself.

Thank You Dieter,

The problem I was having is that I didn't realise that proxy roles are not passed to called objects. Like you suggested, I called all protected objects from the proxyed script and passed the return values through to the page template. All working wonderfully now.

_______________________________________________
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )

Reply via email to