Allow Anonymous users to search for plone Members -
i'm trying allow anonymous users search plone members. got work setting anonymous role have "manage users" permission, not appropriate, of course. is there more specific permission this? "list portal members" didn't work. need allow anonymous search because our intranet users don't authenticate. our plone members come ldap custom fields (telephone, location, register). done plone.app.ldap. i'm using plone-4.0 , plonepas-4.0.1-py2.6
this triggers exception , open login_form anonymous users
member_search_results.pt
<metal:main fill-slot="main" tal:define="search_view here/@@pas_search; listing_allowed python: checkpermission('list portal members', here); results python:listing_allowed , search_view.searchusersbyrequest(request, sort_by='fullname') or [];
if set listing_allowed false, template rendered normally, informing user couldn't search, because has no permission. if listing_allowed true, goes searchusersbyrequest returning login_form.
already @ plonepas configure.zcml see permissions, there's nothing wrong there too. tried change permission zope2.public , zope.public, no success
<browser:page for="*" name="pas_search" class=".search.passearchview" permission="zope2.view" allowed_interface="products.plonepas.interfaces.browser.ipassearchview"/>
any appreciated. thanks!
you better off using https://pypi.python.org/pypi/products.remember/1.9.2 gives members content objects should searchable.
otherwise, might have implement own view search , bypasses security considerations on poking around users.
Comments
Post a Comment