cco/loops
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

minor security-related improvements

Browse source 
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@3906 fd906abe-77d9-0310-91a1-e0d9ade77398
This commit is contained in:
helmutm 2010-06-26 16:51:06 +00:00
parent 6a29b67aad
commit f783895538
3 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
browser/common.py
View file

@ -547,6 +547,10 @@ class BaseView(GenericView, I18NView):
return not self.globalOptions('hideCreateResource') return not self.globalOptions('hideCreateResource')
return True return True
@Lazy
def canAccessRestricted(self):
return checkPermission('loops.ViewRestricted', self.context)
def openEditWindow(self, viewName='edit.html'): def openEditWindow(self, viewName='edit.html'):
if self.editable: if self.editable:
if checkPermission('loops.ManageSite', self.context): if checkPermission('loops.ManageSite', self.context):

2
security/common.py
View file

@ -58,6 +58,8 @@ localRoles = ('zope.Anonymous', 'zope.Member', 'zope.ContentManager',
localPermissions = ('zope.ManageContent', 'zope.View', 'loops.ManageWorkspaces', localPermissions = ('zope.ManageContent', 'zope.View', 'loops.ManageWorkspaces',
'loops.ViewRestricted', 'loops.EditRestricted', 'loops.AssignAsParent',) 'loops.ViewRestricted', 'loops.EditRestricted', 'loops.AssignAsParent',)
acquiringPredicateNames = ('hasType', 'standard', 'ownedby', 'ispartof')
allocationPredicateNames = ('ismaster', 'ismember') allocationPredicateNames = ('ismaster', 'ismember')
workspaceGroupsFolderName = 'gloops_ws' workspaceGroupsFolderName = 'gloops_ws'

4
security/setter.py
View file

@ -36,6 +36,7 @@ from zope.security.proxy import isinstance
from loops.common import adapted, AdapterBase, baseObject from loops.common import adapted, AdapterBase, baseObject
from loops.organize.util import getPrincipalFolder, getGroupsFolder, getGroupId from loops.organize.util import getPrincipalFolder, getGroupsFolder, getGroupId
from loops.security.common import overrides, setRolePermission, setPrincipalRole from loops.security.common import overrides, setRolePermission, setPrincipalRole
from loops.security.common import acquiringPredicateNames
from loops.interfaces import IConceptSchema, IBaseResourceSchema, ILoopsAdapter from loops.interfaces import IConceptSchema, IBaseResourceSchema, ILoopsAdapter
from loops.security.interfaces import ISecuritySetter from loops.security.interfaces import ISecuritySetter
@ -58,8 +59,7 @@ class BaseSecuritySetter(object):
@Lazy @Lazy
def acquiringPredicates(self): def acquiringPredicates(self):
names = ('hasType', 'standard',) return [self.conceptManager.get(n) for n in acquiringPredicateNames]
return [self.conceptManager.get(n) for n in names]
def setDefaultRolePermissions(self): def setDefaultRolePermissions(self):
pass pass