[Zope] TAL and Zope Security

[Dieter Maurer]

patrick sullivan wrote at 2004-5-28 10:49 -0700:
>I am having some problems comprehending a security issue with zope and
>page templates.  I have a folder protected by exUserFolder, and that
>folder contains another folder where my site is sitting.  I have a page
>macro that all other pages use, so i just need to fill in slots of
>content throughtout the site.  
>
>i want to make a page available to Anonymous users.  But this page
>template contains calls to z sql methods, the page macro, some images, 
>etc etc etc.  I changed my Security permissions on this page tempalte
>for Anon to view and access object contents but i am still getting the
>authentication popup.  That didn't work.  So I gave anonymous
>everything in the security tab, and still no joy.  

Difficult security problems are best understood with
the "VerboseSecurity" product. For Zope 2.7, you
will need the CVS version.

-- 
Dieter