From 39d147a97fdc14af0fc556a55ebf9d05e7e438fe Mon Sep 17 00:00:00 2001
From: helmutm <helmutm@fd906abe-77d9-0310-91a1-e0d9ade77398>
Date: Sun, 13 Jun 2010 11:42:06 +0000
Subject: [PATCH] add securitypolicy config file to be placed in instance/etc

git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@3892 fd906abe-77d9-0310-91a1-e0d9ade77398
---
 securitypolicy.zcml | 31 +++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)
 create mode 100644 securitypolicy.zcml

diff --git a/securitypolicy.zcml b/securitypolicy.zcml
new file mode 100644
index 0000000..6fe8a2f
--- /dev/null
+++ b/securitypolicy.zcml
@@ -0,0 +1,31 @@
+<!-- copy this file to the etc subdirectory of your Zope instance -->
+
+<!-- security policy settings -->
+
+<configure
+    xmlns="http://namespaces.zope.org/zope"
+    i18n_domain="zope">
+
+  <include package="zope.app.securitypolicy" />
+
+  <securityPolicy
+    component="zope.app.securitypolicy.zopepolicy.ZopeSecurityPolicy" />
+
+  <role id="zope.Anonymous" title="Everybody"
+        description="All users have this role implicitly" />
+  <role id="zope.Manager" title="Site Manager" />
+  <role id="zope.Member" title="Site Member" />
+  <role id="zope.ContentManager" title="Content Manager" />
+
+  <grant role="zope.Anonymous" permission="zope.app.dublincore.view" />
+  <grant role="zope.Member" permission="zope.View" />
+
+  <grant role="zope.ContentManager" permission="zope.ManageContent" />
+  <grant role="zope.ContentManager" permission="zope.View" />
+
+  <!-- loops-specific grant added in 2010-06 -->
+  <grant role="zope.ContentManager" permission="loops.AssignAsParent" />
+
+  <grantAll role="zope.Manager" />
+
+</configure>