[Zope-Checkins] CVS: Zope3/lib/python/Zope/App/OFS/Content/ZPTPage/Views/Browser - browser.zcml:1.1.2.1.10.1
Jim Fulton
jim@zope.com
Fri, 26 Apr 2002 14:23:15 -0400
Update of /cvs-repository/Zope3/lib/python/Zope/App/OFS/Content/ZPTPage/Views/Browser
In directory cvs.zope.org:/tmp/cvs-serv26237/lib/python/Zope/App/OFS/Content/ZPTPage/Views/Browser
Modified Files:
Tag: SecurityProxy-branch
browser.zcml
Log Message:
Changed security code to use security proxies and name-based
security. This has pretty far-reaching implications:
- You now protect names/operations, *not* values. This means it's as
easy yo protect data attributes that have simple values as it is to
protect methods.
- There is no longer a __permissions__ attribute. :)
- There is no longer a validate method in either security managers or
policies.
- No more need to have a special compiler for restricted code.
In exchange, lots of objects are proxies and code sometimes needs to
be prepared to remove proxies.
In addition:
- Basic objects (None, strings, numbers, etc.) are not wrapped in
context wrappers.
- There is a test that fails unless Python 2.3 is used.
=== Zope3/lib/python/Zope/App/OFS/Content/ZPTPage/Views/Browser/browser.zcml 1.1.2.1 => 1.1.2.1.10.1 ===
<security:protectClass
name=".ZPTPageEval."
- permission_id="Zope.View" methods="index" />
+ permission_id="Zope.View" names="index" />
<browser:view name="edit"
for="Zope.App.OFS.Content.ZPTPage.ZPTPage.IZPTPage."
@@ -20,7 +20,7 @@
<security:protectClass
name=".ZPTPageEdit."
- permission_id="Zope.View" methods="index, action" />
+ permission_id="Zope.View" names="index, action" />
<!-- Registering all the field views for the browser -->