[Zope-CMF] Re: GenericSetup "rolemap" importer does not register new permissions

[Wichert Akkerman]

Previously Damien Baty (ML) wrote:
> 	Hello,
> 
> Le 27/12/07 9:49, Wichert Akkerman a écrit :
> >Previously Damien Baty (ML) wrote:
> >>[...]
> >>
> >>For the record, I have proposed a patch that let us automatically 
> >>register a permission if the profile explicitly asks for it, with 
> >>something like:
> >>
> >>    ...
> >>    <permission name="My new permission"
> >>                  register="True">
> >>      <role name="Manager"/>
> >>      ...
> >>
> >>  https://bugs.launchpad.net/zope-cmf/+bug/178810
> >
> >-1
> >
> >I think it's the wrong place to register permissions. Permissions are
> >something both code and application configuration (ie zcml) relies
> >on. That suggests that registering permissions in a GS profile is too
> >late in the game.
> >
> >To me it makes a lot more sense to register permissions and their 
> >default roles in zcml.
> 
>   Good point. But... how do you do that, then? :) There is a 'grant' 
> directive in Zope 3 defined in 'zope.app.securitypolicy', but this 
> package is not part of Zope 2.10 (nor Zope 2.11). Is there something 
> else I can use in Zope 2 to define permission/roles mappings?

You'll have to make something. I suggest writing a proposal and bringing
it up on the zope-dev list.

Wichert.

-- 
Wichert Akkerman <wichert at wiggy.net>    It is simple to make things.
http://www.wiggy.net/                   It is hard to make things simple.