Please login to participate.
.
Home
.
 
+

milajones Manage Portlets - Member Security Settings Problem.

I'm just about ready to start tearing my hair out - any help on this would be greatly appreciated!

I am using Cyn.in to create a collab portal for a dozen or so different organizations (they are all in the same industry, and are looking to share resources).

I have created 2 member groups for the first organizations to start testing - I'll call them group A and group B. Group B should only be able to only add/edit their own space, but can view content from both group A and B. Group A can do whatever they want, as they are the owners of the portal.

I created a test user account for group B. When I log in with a Group B account (member role), everything is fine until I get to group B's space. When I click on their space, I see the 'Manage Portlets' option available, as well as the Manage Space tab, with the ability to customize the space, and set the share settings. This is something only the site admins should be in control of. I played with every combination I could thing of in the group and role settings, and I can't figure out how to remove these permissions.

The main confusion is - what is the difference between edit and review? I can't find anything online.

Frustrated, I went into the Zope "/manage" area, and changed the security settings for Portlets:
Manage own portlets - checked managers
Portlets: Manage portlets - checked managers
Manage users - checked managers
Sharing page: Delegate roles - checked managers

It seems to have done nothing.... is anyone able to point me in the right direction for this? Thanks!!!

Rating
+2
Last workflowed by romasha
Jun 07, 2011 10:46 AM
Rating
0
Last discussed by jarturomora
Apr 02, 2011 11:43 AM
+

brenternet I noticed that when creating a group a user account is also created that resides in the People Directory as well. Is there any way to hide this? Secondly, I have also noticed that when I attempt to remove a group I receive an error.

Traceback (innermost last):
  Module ZPublisher.Publish, line 119, in publish
  Module ZPublisher.mapply, line 88, in mapply
  Module ZPublisher.Publish, line 42, in call_object
  Module Products.CMFFormController.FSControllerPageTemplate, line 90, in __call__
  Module Products.CMFFormController.BaseControllerPageTemplate, line 28, in _call
  Module Products.CMFFormController.ControllerBase, line 231, in getNext
  Module Products.CMFFormController.Actions.TraverseTo, line 38, in __call__
  Module ZPublisher.mapply, line 88, in mapply
  Module ZPublisher.Publish, line 42, in call_object
  Module Products.CMFFormController.FSControllerPythonScript, line 104, in __call__
  Module Products.CMFFormController.Script, line 145, in __call__
  Module Products.CMFCore.FSPythonScript, line 140, in __call__
  Module Shared.DC.Scripts.Bindings, line 313, in __call__
  Module Shared.DC.Scripts.Bindings, line 350, in _bindAndExec
  Module Products.CMFCore.FSPythonScript, line 196, in _exec
  Module None, line 19, in prefs_group_modify
   - <FSControllerPythonScript at /cynin/prefs_group_modify>
   - Line 19
  Module <string>, line 7, in _facade
  Module AccessControl.requestmethod, line 64, in _curried
  Module Products.PlonePAS.tools.groups, line 169, in removeGroups
  Module <string>, line 5, in _facade
  Module AccessControl.requestmethod, line 64, in _curried
  Module Products.PlonePAS.tools.groups, line 146, in removeGroup
  Module <string>, line 5, in _facade
  Module AccessControl.requestmethod, line 64, in _curried
  Module Products.PlonePAS.tools.groups, line 146, in removeGroup
  Module Products.PlonePAS.plugins.group, line 77, in removeGroup
  Module Products.PluggableAuthService.plugins.ZODBGroupManager, line 209, in removeGroup
  Module Products.PlonePAS.plugins.group, line 87, in removePrincipalFromGroup
  Module <string>, line 12, in _facade
  Module AccessControl.requestmethod, line 64, in _curried
  Module Products.PluggableAuthService.plugins.ZODBGroupManager, line 301, in removePrincipalFromGroup
KeyError: 'enterpriseApplications'

Update: Is this information stored in Zope source_groups? Zope source_users lists all of my users so I would assume so. However, when I attempt to view source_groups I receive the below error.

Traceback (innermost last):
  Module ZPublisher.Publish, line 119, in publish
  Module ZPublisher.mapply, line 88, in mapply
  Module ZPublisher.Publish, line 42, in call_object
  Module Shared.DC.Scripts.Bindings, line 313, in __call__
  Module Shared.DC.Scripts.Bindings, line 350, in _bindAndExec
  Module Products.PageTemplates.PageTemplateFile, line 129, in _exec
  Module Products.CacheSetup.patch_cmf, line 74, in PT_pt_render
  Module Products.CacheSetup.patch_utils, line 9, in call_pattern
  Module Products.PageTemplates.PageTemplate, line 98, in pt_render
  Module zope.pagetemplate.pagetemplate, line 117, in pt_render
  Module zope.tal.talinterpreter, line 271, in __call__
  Module zope.tal.talinterpreter, line 346, in interpret
  Module zope.tal.talinterpreter, line 536, in do_optTag_tal
  Module zope.tal.talinterpreter, line 521, in do_optTag
  Module zope.tal.talinterpreter, line 516, in no_tag
  Module zope.tal.talinterpreter, line 346, in interpret
  Module zope.tal.talinterpreter, line 855, in do_condition
  Module zope.tal.talinterpreter, line 346, in interpret
  Module zope.tal.talinterpreter, line 824, in do_loop_tal
  Module zope.tal.talinterpreter, line 346, in interpret
  Module zope.tal.talinterpreter, line 623, in do_insertText_tal
  Module Products.PageTemplates.Expressions, line 230, in evaluateText
  Module zope.tales.tales, line 696, in evaluate
   - URL: manage_groups
   - Line 55, Column 4
   - Expression: <PythonExpr ','.join( [x[1] for x in here.listAssignedPrincipals(info['id'])] )>
   - Names:
      {'container': <GroupManager at /cynin/acl_users/source_groups>,
       'context': <GroupManager at /cynin/acl_users/source_groups>,
       'default': <object object at 0xb7d99528>,
       'here': <GroupManager at /cynin/acl_users/source_groups>,
       'loop': {'info': <Products.PageTemplates.Expressions.PathIterator object at 0x1a0ee36c>},
       'nothing': None,
       'options': {'args': ()},
       'repeat': <Products.PageTemplates.Expressions.SafeMapping object at 0x15d4edcc>,
       'request': <HTTPRequest, URL=http://ksotvcyn01:8080/cynin/acl_users/source_groups/manage_groups>,
       'root': <Application at >,
       'template': <PageTemplateFile at /cynin/acl_users/source_groups/manage_groups>,
       'user': <PloneUser 'brent.admin'>}
  Module Products.PageTemplates.ZRPythonExpr, line 49, in __call__
   - __traceback_info__: ','.join( [x[1] for x in here.listAssignedPrincipals(info['id'])] )
  Module PythonExpr, line 1, in <expression>
  Module Products.PluggableAuthService.plugins.ZODBGroupManager, line 257, in listAssignedPrincipals
AssertionError

Rating
0
Last discussed by patrick
Mar 10, 2011 10:26 PM
Rating
0
Last discussed by romasha
Feb 26, 2011 09:53 AM
« Previous 20 items 1 2 3 4 5 ... 19 Next 20 items »
 
Loading