[Zope] role, user defined roles, and inclusion

robert robert at redcor.ch
Thu Mar 31 00:22:32 EST 2005


Dieter,
thanks for your clarifications.
Is my assumption that granting a permission to Anonymous means granting 
it to anybody correct?
Robert

Dieter Maurer wrote:

>Chris Withers wrote at 2005-3-30 08:31 +0100:
>  
>
>>Dennis Allison wrote:
>>    
>>
>>>Are the standard roles (anonymous, authorized_user, manager) inclusive?  
>>>      
>>>
>
>Yes. These special roles are "inclusive" (as their name might suggest).
>
>  
>
>>...
>>A user will have the Anonymous role iff they have not supplied any 
>>authentication credentials.
>>    
>>
>
>Any user has the "Anonymous" role whether or not it is authenticated.
>
>  
>
>>A user will have the Authenticated role iff they HAVE supplied 
>>authentication credentials.
>>    
>>
>
>Especially, any "Manager" has the "Authenticated" role (as
>it is authenticated).
>
>  
>
>>A user will never have Authenticated and Anonymous roles at the same time.
>>    
>>
>
>This is wrong.
>
>  
>



More information about the Zope mailing list