665c0271fd
(1) provide ILocation adapter for WSI; (2) activate security handlers.
...
(1) ILocation adapter seems to be required by absolute_url in
BlueBream.
(2) security-related event handlers had been commented out in
bbmaster for performance reasons; are now re-activated.
2016-04-17 14:05:59 +02:00
3c1a5ccdf4
merge branch master
2015-06-12 08:35:07 +02:00
09b75367a7
more control on propagation of role permissions via option
2015-04-19 09:28:30 +02:00
2c548a3df6
revert some changes; provide optional logging of acquired security settings
2015-04-18 15:40:43 +02:00
8d66ee3830
allow blocking of security acquisition by option; try to keep current role permission setting on object if any
2015-04-18 13:43:44 +02:00
8ab637c402
allow for additional access control (without acquisition/inheritance) on queries and types via 'access_permission' option
2014-04-26 15:52:28 +02:00
7e70140f52
merge branch master
2013-07-16 18:13:05 +02:00
6f59f3892a
check permission when displaying part views; restrict access to person work items
2013-07-15 16:50:41 +02:00
12ee37881d
allow suppressing of security propagation via noPropagateSecurity option
2013-05-22 15:08:24 +02:00
b5ab23a90b
merge branch master
2013-03-23 11:32:29 +01:00
a411cf654f
avoid error for objects without security assertions (like ConceptManager)
2013-02-16 15:46:47 +01:00
344a1d81e5
allow better control of create actions by checking 'AssignAsParent': check action permissions + related fixes
2013-01-28 16:00:06 +01:00
99de14ff44
bug fix: security setting for resource
2013-01-20 14:29:05 +01:00
e52543ce8b
fix swapping of role and principal; other minor improvements
2013-01-17 11:28:17 +01:00
3fa9cee5e6
change German translation for finished
2013-01-16 11:39:35 +01:00
e920fc9786
propagate principal roles via new acquirePrincipalRoles() method (instead of copyPrincipalRoles())
2013-01-10 15:52:56 +01:00
5592ffb734
set state-based security as part of default security settings
2013-01-10 13:36:07 +01:00
0c8cc8a24e
set loops.Owner role on object creation; do not propagate Owner role to children/resources
2013-01-10 12:58:09 +01:00
2cee73672b
new role loops.Person for Person object and its children, with zope.View default permission; + security propagation fixes
2013-01-09 15:19:35 +01:00
837bf66e5c
suppress security propagation for performance reasons
2011-11-21 14:59:18 +01:00
2f74a6dc81
make loops package work with BlueBream 1.0: system running
2011-09-29 22:27:06 +02:00
8dc0d49972
work in progress: make loops package work with BlueBream 1.0
2011-09-29 19:21:12 +02:00
helmutm
6aa174b494
propagate security settings to all versions of a resource
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@4208 fd906abe-77d9-0310-91a1-e0d9ade77398
2011-03-24 09:32:09 +00:00
helmutm
bb49e938e4
revert default settings for workspace
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@4207 fd906abe-77d9-0310-91a1-e0d9ade77398
2011-03-24 07:53:25 +00:00
helmutm
e763097d81
changed default for workspaces: propagate security
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@4206 fd906abe-77d9-0310-91a1-e0d9ade77398
2011-03-24 07:38:17 +00:00
helmutm
386a65ad61
block propagation of principal role settings across workspaces
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@4155 fd906abe-77d9-0310-91a1-e0d9ade77398
2011-01-24 18:39:47 +00:00
helmutm
b52c68edcb
enable translation for role names
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@4138 fd906abe-77d9-0310-91a1-e0d9ade77398
2011-01-09 09:44:22 +00:00
helmutm
a94f3b9f40
improve layout
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@4080 fd906abe-77d9-0310-91a1-e0d9ade77398
2010-11-24 11:06:29 +00:00
helmutm
0332f9a2e1
new version of workspace assignments view with predicate columns
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@4079 fd906abe-77d9-0310-91a1-e0d9ade77398
2010-11-24 11:01:45 +00:00
helmutm
2d6b34f8a7
improve security audit views
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@4074 fd906abe-77d9-0310-91a1-e0d9ade77398
2010-11-13 16:46:30 +00:00
helmutm
a3a44a42d8
add security audit view: Workspace Assignments
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@4073 fd906abe-77d9-0310-91a1-e0d9ade77398
2010-11-13 10:35:03 +00:00
helmutm
c2ccc9fdb5
create separate browser package for security-related views; provide first end-user view: Role Permissions by Type
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@4072 fd906abe-77d9-0310-91a1-e0d9ade77398
2010-11-13 09:19:29 +00:00
helmutm
1b56f8fd44
provide additional allocation predicate 'isowner'
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@4035 fd906abe-77d9-0310-91a1-e0d9ade77398
2010-10-12 09:07:00 +00:00
helmutm
e05ee9942b
allow wrapping of principal names
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@3972 fd906abe-77d9-0310-91a1-e0d9ade77398
2010-08-23 05:39:04 +00:00
helmutm
00ae2f6a99
provide log-in portlet
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@3910 fd906abe-77d9-0310-91a1-e0d9ade77398
2010-06-27 13:13:41 +00:00
helmutm
f783895538
minor security-related improvements
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@3906 fd906abe-77d9-0310-91a1-e0d9ade77398
2010-06-26 16:51:06 +00:00
helmutm
5affb38833
security: propagate security upon saving workspace information; copy principal roles from workspace, too
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@3903 fd906abe-77d9-0310-91a1-e0d9ade77398
2010-06-14 11:19:08 +00:00
helmutm
793f943f99
show default group name also if group folder does not yet exist
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@3902 fd906abe-77d9-0310-91a1-e0d9ade77398
2010-06-14 10:25:39 +00:00
helmutm
d014f5bead
fix creation of group folder
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@3899 fd906abe-77d9-0310-91a1-e0d9ade77398
2010-06-14 10:11:55 +00:00
helmutm
43770d1b16
show default group name also if workspace information exists but group names are not stored yet
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@3897 fd906abe-77d9-0310-91a1-e0d9ade77398
2010-06-14 09:59:14 +00:00
helmutm
8a6800ff13
minor presentation fixes
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@3896 fd906abe-77d9-0310-91a1-e0d9ade77398
2010-06-14 06:53:47 +00:00
helmutm
010acc1eaf
implement group membership automatics when assigning or deassigning a person to a workspace concept via ismaster or ismember predicate
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@3893 fd906abe-77d9-0310-91a1-e0d9ade77398
2010-06-13 11:43:07 +00:00
helmutm
3d7c87b7b9
implement workspace-based security management
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@3891 fd906abe-77d9-0310-91a1-e0d9ade77398
2010-06-12 10:51:17 +00:00
helmutm
504092b268
propagation of security settings (principal roles and role permissions) basically working
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@3649 fd906abe-77d9-0310-91a1-e0d9ade77398
2009-12-13 15:41:30 +00:00
helmutm
68c5dbbc08
improvements and fixes for automatic setting of role permissions
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@3628 fd906abe-77d9-0310-91a1-e0d9ade77398
2009-11-15 10:29:36 +00:00
helmutm
87f46f0d28
propagation of role permission settings from workspaces basically working
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@3623 fd906abe-77d9-0310-91a1-e0d9ade77398
2009-11-10 18:19:49 +00:00
helmutm
fdd7f8637b
work in progress: workspace management: control permissions for subobjects
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@3622 fd906abe-77d9-0310-91a1-e0d9ade77398
2009-11-09 12:59:58 +00:00
helmutm
bcd76509e7
work in progress: workspace (parent-) -governed 'children' grants (principal-to-role mappings)
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@3616 fd906abe-77d9-0310-91a1-e0d9ade77398
2009-11-01 21:30:17 +00:00
helmutm
21036dae20
provide additional permission check
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@3572 fd906abe-77d9-0310-91a1-e0d9ade77398
2009-10-08 09:17:35 +00:00
helmutm
46b8b0b7eb
restrict using type as parent to IConcept and IResource objects
...
git-svn-id: svn://svn.cy55.de/Zope3/src/loops/trunk@3199 fd906abe-77d9-0310-91a1-e0d9ade77398
2009-02-02 06:55:00 +00:00
