[Zope-dev] Role Manager and permissions

[Petr Knapek]

Hi Zopists,
please can anybody explain (point to any documentation) why there is
change in default permission setting for role 'Manager' when a new
object is created?  In older versions of Zope (2.2.x) when a new
instance of any object was created (added) into ZODB role Manager had
automatically set all permissions explicitly in addition of acquisition.
Now (Zope 2.4.0 beta 3, Zope 2.4.1 - both from sources at FreeBSD) there
is no explicit permission setting for role Manager when a new object
instance is added into ZODB.

I have also read very carefully Developer's guide and there is something
what as I think is not working properly with setPermissionDefault method
of SecurityInfo() object. I cite from from Capter 6: Security,
subchapter Setting Default Roles For Permissions

----
As we saw earlier, the SecurityInfo interface provided a way to
associate methods with permissions. It also provides a way to associate
a permission with a set of default roles that should have that
permission on instances of your object.

To associate a permission with one or more roles, use the following:

        security.setPermissionDefault(permissionName, rolesList)

The permissionName argument should be the name of a permission that you
have used in your object and rolesList should be a sequence (tuple or
list) of role names that should be associated with permissionName by
default on instances of your object.=20

Note that it is not always necessary to use this method. All permissions
for which you did not set defaults using setPermissionDefault are
assumed to have a single default role of Manager. Notable exceptions to
this rule include View and Access contents information, which always
have the default roles Manager and Anonymous.=20
---

End of citation.  Is it bug or feature?=20

Thanks, Petr

--=20
Petr Kn=E1pek
Network Development
NEXTRA Czech Republic s.r.o. http://www.nextra.cz/
V Celnici 10 / CZ - 117 21 Praha 1 / Czech Republic
Tel: +420/2/96 355 111 / Mobile: +420/604-202 611
E-Mail: petr.knapek@nextra.com

Contact address:
Hlinky 114 / CZ - 603 00 Brno / Czech Republic
Tel: +420/5/43 554 150 / FAX: +420/5/43 554 214
see Disclaimer http://www.nextra.cz/disclaimer/