TTW Role Permissions are not affecting addables

Bug #97830 reported by Bug Importer
0
Affects Status Importance Assigned to Milestone
Zope 3
Fix Released
Medium
Steve Alexander

Bug Description

TTW setting of Role Permissions saves the settings, however they don't actually affect which objects the role is allowed to add.

To recreate the bug:

1. Use the Step6 folder from the Zope 3 tutorial at:

http://cvs.zope.org/Docs/ZopeComponentArchitecture/PythonProgrammerTutorial/Chapter1/Step6/

as your Contact package (living in the ZopeProducts/Contact/ directory of your Zope sandbox).

2. Add the product to your products.zcml file.

3. Log into Zope as a Site Manager.

4. Use the TTW interface to access the Role Permissions view of the root folder and "+" the "Manage Contacts" permission for Site Managers.

5. Go back to the contents view of the root folder, and click "Add...".

The Contact object does not show up in the list of addables.

However, if you manually hack the principals.zcml file to grant either your principal or site managers the "Manage Contacts" permission, you will see your newly-created Contact component as an addable object.

Tags: bug security
Revision history for this message
Steve Alexander (stevea) wrote :

Status: Pending => Accepted

 Supporters added: stevea

This is still broken.

I guess I'll take a look at it...

Revision history for this message
Steve Alexander (stevea) wrote :

After many hours in the python debugger, I've tracked this down to a couple of missing ContextMethods, and a the need for a special attribute to make ViewPageTemplateFiles into ContextMethods.

I'll resolve this after I've checked in and checked tests pass.

Revision history for this message
Steve Alexander (stevea) wrote :

Status: Accepted => Resolved

Fixed. There ought to be some kind of functional test for this, though.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.