[CPS-users] Help, I broke Zope authentication!

[Georges Racinet]

On Sep 13, 2006, at 7:30 PM, JB wrote:

> Greetings,

Hi,

> While playing with SQLDirectory, I got it working to authenticate  
> users on my site.  However, when logging on as the Site Owner, I  
> noticed that the roles don't work correctly.  So, I figured I'd  
> rename my new members directory to members_sql, and create a  
> Stacking directory that stacks members_zodb and members_sql, so  
> that the Owners have all of the permissions they need.
>
> However, it seems that Zope itself now authenticates against my CPS  
> SQL-based members directory; so, under CPS/directories I can't add  
> a stacking directory or rename the members directory to be  
> members_sql.
>
> How can I make Zope authenticate against its own acl_users (and get  
> Ownerr roles from there) instead of authenticating against the CPS  
> members directory?

This is indeed the point of having a user folder inside of CPS. Zope  
will always use it for authentication *first*. If your required user  
does not exist at this level,  the user folder sitting at Zope's root  
(ie, /acl_users) will be called.

Bottom line: create a Manager in /acl_users whose id doesn't exist  
within CPS' directories.

If you can't work in ZMI with such an user, this is the comeback of  
an old CPSUserFolder bug. Btw which CPS version do you base your  
developments on ?

>
> Also, how do roles work in the SQLDirectory?  I have a varchar  
> field with the roles like this:  "Owner, Manager, Member"  But it  
> doesn't seem to work like that...

Roles are dynamically allocated by TALES expressions in directories.  
Check the 'Entry local roles'  tab.

>
> Thanks,
> -Josh
> _______________________________________________
> cps-users mailing list
> cps-users at lists.nuxeo.com
> http://lists.nuxeo.com/mailman/listinfo/cps-users

---------
Georges Racinet                        Nuxeo SAS
gracinet at nuxeo.com                http://nuxeo.com
Tel: +33 (0) 1 40 33 71 73