From 8b5df16afc6412b6d928cc06fddfaf838d574308 Mon Sep 17 00:00:00 2001
From: helmutm <helmutm@fd906abe-77d9-0310-91a1-e0d9ade77398>
Date: Thu, 15 May 2008 13:39:16 +0000
Subject: [PATCH] show object actions only for logged-in users

git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@2596 fd906abe-77d9-0310-91a1-e0d9ade77398
---
 browser/common.py          | 7 ++++++-
 browser/concept_macros.pt  | 6 ++++--
 browser/resource_macros.pt | 4 +++-
 3 files changed, 13 insertions(+), 4 deletions(-)

diff --git a/browser/common.py b/browser/common.py
index f2d93be..d6a9141 100644
--- a/browser/common.py
+++ b/browser/common.py
@@ -28,6 +28,7 @@ from zope.app.form.browser.interfaces import ITerms
 from zope.app.i18n.interfaces import ITranslationDomain
 from zope.app.security.interfaces import IAuthentication
 from zope.app.pagetemplate import ViewPageTemplateFile
+from zope.app.security.interfaces import IUnauthenticatedPrincipal
 from zope.app.security.interfaces import PrincipalLookupError
 from zope.cachedescriptors.property import Lazy
 from zope.dottedname.resolve import resolve
@@ -400,7 +401,7 @@ class BaseView(GenericView, I18NView):
             result.append(stf)
         return result
 
-    # controlling editing
+    # controlling actions and editing
 
     @Lazy
     def editable(self):
@@ -415,6 +416,10 @@ class BaseView(GenericView, I18NView):
             actions.extend(self.actions[category](self, page=page, target=target))
         return actions
 
+    @Lazy
+    def showObjectActions(self):
+        return not IUnauthenticatedPrincipal.providedBy(self.request.principal)
+
     def openEditWindow(self, viewName='edit.html'):
         if self.editable:
             if checkPermission('loops.ManageSite', self.context):
diff --git a/browser/concept_macros.pt b/browser/concept_macros.pt
index 11d799e..0ca0c19 100644
--- a/browser/concept_macros.pt
+++ b/browser/concept_macros.pt
@@ -114,7 +114,8 @@
             <th i18n:translate="">Size</th>
             <th i18n:translate="">Modification Date</th>
             <th i18n:translate="">Author(s)</th>
-            <th i18n:translate="">Info</th>
+            <th i18n:translate=""
+                tal:condition="view/showObjectActions">Info</th>
           </tr>
           <tal:items repeat="related resources">
             <tal:item define="class python: repeat['related'].odd() and 'even' or 'odd';
@@ -144,7 +145,8 @@
                 <td><span tal:replace="related/creators">John</span></td>
                 <td style="white-space: nowrap"
                     tal:define="target nocall:related;
-                                style nothing">
+                                style nothing"
+                    tal:condition="view/showObjectActions">
                   <div metal:use-macro="views/node_macros/object_actions" />
                 </td>
               </tr>
diff --git a/browser/resource_macros.pt b/browser/resource_macros.pt
index e31540a..fe1cdf2 100644
--- a/browser/resource_macros.pt
+++ b/browser/resource_macros.pt
@@ -2,7 +2,9 @@
   <div tal:attributes="ondblclick python: item.openEditWindow('configure.html')">
     <tal:body define="itemNum view/itemNum;
                       id string:$itemNum.body;">
-      <div metal:use-macro="views/node_macros/object_actions" />
+      <tal:actions condition="view/showObjectActions">
+        <div metal:use-macro="views/node_macros/object_actions" />
+      </tal:actions>
       <h1 tal:content="item/title">Title</h1>
       <p tal:define="description description|item/description"
          tal:condition="description">