[Opensource] Retrieving data from a custom Registration Domain (or: how do I bypass secuirty setting for a DBObject)?

[Michael Rimov]

At 07:54 PM 8/6/2002 -0500, you wrote:
>I've set up a custom registration domain. Now, I'm trying to use some of 
>the users information from that object in my webapp. Is there a mechanism 
>to retrieve this info?

Not specifically right now no.  We don't have any built in concept of 
ownership, so that is not possible.


>
>I can get the uid from the session and do the lookup directly into the 
>DBObject, but this requires me to set the security setting for the 
>registration domain DBObject to be readable by all registered. This would 
>mean that I would have to disable DBMaint on my system, otherwise any user 
>could modify any others' registration info.

Well, if you only enable 'Search' permission on the Registered table then 
people could view the records in the list state but not be able to view 
them in the add/update/delete stage... is this kind of along the lines of 
what you're looking for?


>So, is there some other mechanism to retrieve this data that bypasses the 
>security, or do I have to do that myself? If myself, how do I bypass 
>security on a DBObject?

DBObject.setRequestingUid(SecuredDBObject.SYSTEM_ACCOUNT);

Bypasses security

HTH!
                                                 -Mike