cco/loops
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

set loops.Owner role on object creation; do not propagate Owner role to children/resources

Browse source
This commit is contained in:
Helmut Merz 2013-01-10 12:58:09 +01:00
parent 2cee73672b
commit 0c8cc8a24e
2 changed files with 6 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
security/common.py
View file

@ -167,6 +167,9 @@ def setDefaultSecurity(obj, event):
aObj = adapted(obj)
setter = ISecuritySetter(aObj)
setter.setDefaultSecurity()
principal = getCurrentPrincipal()
if principal is not None:
assignOwner(obj, principal.id)
@component.adapter(IConcept, IAssignmentEvent)

4
security/setter.py
View file

@ -135,6 +135,7 @@ class LoopsObjectSecuritySetter(BaseSecuritySetter):
prm = IPrincipalRoleMap(baseObject(source.context))
for r, p, s in prm.getPrincipalsAndRoles():
#if p in self.workspacePrincipals:
if r != 'loops.Owner':
if revert:
setPrincipalRole(self.principalRoleManager, r, p, Unset)
else:
@ -203,7 +204,8 @@ class ResourceSecuritySetter(LoopsObjectSecuritySetter):
vSetters = [ISecuritySetter(adapted(v)) for v in versions]
prm = IPrincipalRoleMap(baseObject(source.context))
for r, p, s in prm.getPrincipalsAndRoles():
if p in self.workspacePrincipals:
#if p in self.workspacePrincipals:
if r != 'loops.Owner' and p in self.workspacePrincipals:
for v in vSetters:
if revert:
setPrincipalRole(v.principalRoleManager, r, p, Unset)