Bugfix for manage_dtpref in ZMS 2.11 (was: Bad problem with ZMI Sitemap in ZMS 2.11.0)

Dear Mr. Hoffmann,

attached is a suggested bugfix for zmsobject.py and ZMSItem.py (patch
based on ZMS 2.11.0-09_4).

Obviously during the transition of the ZMS object model in 2.11, the
method manage_dtpref() was overlooked. As far as I can see,
manage_dtpref() should be moved from ZMSObject into ZMSItem as well.

This patch fixes the problem with the ZMS Sitemap that I reported a week
ago (see below). The problem behind my observation was that non-admin
ZMS users were not allowed to use manage_dtpref, so they failed to
switch any preference in the management interface (like e.g. the
sitemap).

Please consider this fix for inclusion in 2.11.0.

Regards,
    Gregor Hoffleit


* Gregor Hoffleit <[email protected]> [080430 12:26]:
> I running into a strange and bad behavior with ZMS 2.11.0:
> 
> When I try to enable the left navigation tree frame in the ZMS
> management interface ('Sitemap' button at the right top), I'm kicked out
> of the Zope/ZMS session!
> 
> I.e. the browser requests a username and password for the realm 'Zope',
> invalidating my existing session.
> 
> 
> To reproduce, create a new ZMS instance. In the ZMS instance, create a
> user "autor" with (only!) the "Autor" role in the ZMS Home. Log out of
> ZMS. (Perhaps you should close all browser windows and empty your
> browsers cache for cookies etc., if you can't reproduce the following.)
> Open the public homepage of the ZMS instance and log into ZMS as
> "autor". Click on the "Sitemap" icon at the right top. Ooops: The
> browser asks for username and password for 'Zope', and the ZMS session
> is invalidated.
> 
> 
> This happens e.g. with ZMS 2.11.0-09_3 (running on Zope 2.10.5 on Debian
> 4.0). I haven't seen this problem with ZMS 2.10.x.
> 
> The behavior seems to vary on different browser systems, but I was able
> to reproduce the problem with Safari and Firefox on OSX and Firefox on
> Linux. It also affects MSIE and Firefox on Windows.


-- 
Gregor Hoffleit <[email protected]>
Media Supervision Software Consulting GmbH
Georg-Friedrich-Haendel-Str. 13, 69214 Eppelheim/Heidelberg
Tel: +49 6221 705079-0  /  Fax: +49 6221 705079-80
Amtsgericht Mannheim, HRB 336821, Geschäftsführer Reinhard Kratzke
http://www.mediasupervision.de/