AW: DC.accessRights.Restricted + Abonnent [1 Attachment]

"Dr. Frank Hoffmann" <[email protected]> Fri, 16 Apr 2010 14:25:20 +0200
Newsgroups gmane.comp.cms.zms.devel
Message-ID <5CBE69235ABA4FEE851D51E5C19E598C@hal1>
Hello,
the config procedure is described correctly:
1. First you configure a boolean meta attribute
id="attr_dc_accessrights_restricted" (you can import the appended xml config
file). 
2. Then you add the meta to the content class definitions via "Content
Objects" menu, maybe ZMSFolder and ZMSDocument or any DOCUMENTLIKE object.

So you have to look for the error:
By setting the attr_dc_accessrights_restricted to "yes" ZMS changes the
basic Zope right of viewing for the role anonymous. You can check this by
looking at the corresponding Zope menu via /manage_access. Here you can see
wether role "ZMSSubscriber" is allowed to view or not.
Furthermore in that menu you have got a link to the Zope Local Roles:
/manage_listLocalRoles
There you can check wether the user really has the local role
"ZMSSubscriber".

I hope this will help,
best regards
fh, moderator

PS:
With 2010-02-22:zms2-2.12.1-15 the ldad-GUI in ZMS was improved. Maybe you
try the latest patch, always found here:
http://zmslabs.org/download/ZMS-latest.tar.gz
(Hint: mind the changes.txt)


-----Ursprüngliche Nachricht-----
Von: [email protected] [mailto:[email protected]]
Im Auftrag von Christian Adolphi | meditix GmbH
Gesendet: Mittwoch, 14. April 2010 11:49
An: [email protected]
Betreff: [zms-developers] DC.accessRights.Restricted + Abonnent

Hi developers,

to restrict unauthorized access in a 2.12 version of ZMS, I defined and 
inserted a container object with attr_dc_accessrights_restricted = true 
and users with the Abonnent-role for this object. But when I call it in 
the browser and try to login, I got an Unauthorized-error.

What is my fault?

Thank you very much.

Christian Adolphi