[CPS-devel] Where to define the roles allowed to access

[Joachim Schmitz]

To reply to my own post:

I investigated the problem a little deeper. It is caused by using the 
method context.orderObjects(), which is protected by the "Manage 
properties" permission. I gave this permission to the SectionManager,
but still the browser login box pops up, which should not happen at all.
Further investigation showed, that I also need the permission
"Change subobjects order" which is not mentioned in OrderSupport.py at 
all. How would I find such things, except with try and error ?

Joachim Schmitz schrieb:
> hi,
> 
> if I access our portal as a user which has no Manager role I get the 
> following traceback from verbose security:
> 
> Unauthorized: Your user account does not have the required permission. 
> Access to 'edit' of (StudyLevel at 
> /srp/campus/academics/AGR/AEE/certificates/BAGAEE/1004528/650171125__0001) 
> denied. Your user account, depman1, exists at /srp/acl_users. Access 
> requires one of the following roles: ['Manager']. Your roles in this 
> context are ['Anonymous', 'Authenticated', 'Member', 'Owner', 
> 'SectionManager', 'SectionReader', 'SectionReviewer'].
> 
> The roles are exactly as I want them. I am wondering where do I define 
> the required roles in CPS so that for example SectionManager is one of 
> them ?
> 
> Any hint is welcome.
> 
> 


-- 
Mit freundlichen Grüßen                                Joachim Schmitz
......................................................................
AixtraWare eK ..Joachim Schmitz ..www.aixtraware.de ..t: +49-2464-8851
Hüsgenstr. 33a .....d-52457 Aldenhoven .............f: +49-2464-905163