[CPS-devel] Re: CPSLDAPsetup problem

Olivier Grisel ogrisel at nuxeo.com
Tue Apr 11 15:09:02 CEST 2006


lopez adrian a écrit :

> that was just an exemple, the error still appear when i change one of the member attribute.
>  like phone nomber, role, group, etc i think the error appear because CPS wants to update LDAP data, but like i dont put LDAP admin in the configuration he cant update the LDAP.
> 
> How can i fix that? im going to add new fields on members like postal adress, house phone, etc so i will have to make changes on each member data.

Easy solution: put the whole members directory in read only mode by removing ACL 
rights for entry creation/modification/deletion. You can do that in 
CPSLDAPSetup/profiles/default/directories/members.xml (do not forget to reimport 
the profile to get your changes applied) or directly in the ZMI in 
portal_directories/members .

You will still be able to edit roles and groups with the roles and groups 
directories.

Fine grained solution: configure the access rights on a per field level in the 
members schema to protect readonly attributes from getting written.

-- 
Olivier



More information about the cps-devel mailing list
More information about CPS: CPS project - CVS - API

Hosting: Nuxeo: Zope service provider


This list archive provided by Nuxeo, the leaders of open source ECM. Check out the Nuxeo 5 open source, standards-based ECM project.