[Zope] RE: What method do I use to check access?

[Michel Pelletier]

> -----Original Message-----
> From: Jay, Dylan [mailto:djay@lucent.com]
> Sent: Wednesday, May 12, 1999 11:28 PM
> To: 'Martijn Pieters'; 'Jason Spisak'; zope@zope.org
> Subject: RE: [Zope] RE: What method do I use to check access?
> 
> 
> 
> 
> > -----Original Message-----
> > From: Martijn Pieters [mailto:mj@antraciet.nl]
> > Sent: Tuesday, May 11, 1999 10:23 PM
> > To: Jay, Dylan; 'Jason Spisak'; zope@zope.org
> > Subject: Re: [Zope] RE: What method do I use to check access?
> > 
> > 
> > At 01:28 11/05/99 , Jay, Dylan wrote:
> > > > Jay,
> > > >
> > > > Try <!--#if "AUTHENTICATED_USER.has_role('foo')"-->.  
> There was an
> > > > excellent posting in the archives about all the 
> > possibilities with the
> > > > user object.  Also read the files in the AccessControl 
> > folder inside
> > > > Zope/lib/python.
> > >
> > >the has_role method I already use and is not convienient as 
> > it means I have
> > >to hard code the roles.
> > >I've looked in AccessControl and only come across
> > >def allowed(self,parent,roles=None):
> > >but was unsuccessful in getting it to do what I want.
> > >
> > >I will look for that email in the archives.
> > 
> > AUTHENTICATED_USER.allowed won't do what you want, I think. A now 
> > deprecated method that is now replaced by has_role was 
> > nothing more than an 
> > alias to the allowed() method, so you cannot get any (or much) more 
> > information from allowed() than you can get from has_role().
> > 
> > Explain to us what you want to do.
> 
> I want a method such that 
> <!--#if "AUTHENTICATED_USER.hasPermission('View',myDoc)"-->
> or something similar.
> 

I've never seen or used anything like this,  so perhaps you may want to
try to refactor your problem, otherwise:

Users don't have permissions, Users have roles.  Using the security
screen in the managment interface, you map which roles have which
permissions, and when you create Users, you give them roles.  If your
user is in a Role which has the 'View' permission associated with it,
then you don't need to do the #if check.  I think maybe what your
looking for is "Do any of my User's *Roles* map to the permission x?".
(Not using 'View' as an example because anonymous maps to 'View' by
default)

This would require a bit of tinkering, but it could be done with
AUTHENTICATED_USER.getRoles() and rolesOfPermission(x).  You may also
want to talk a look at AccessControl/Roles.py, there are several methods
defined in there to exampine roles and permissions, like
permissionsOfRole (the inverse of rolesOfPermision) and
acquiredRolesAreUsedBy.

-Michel

> 
> _______________________________________________
> Zope maillist  -  Zope@zope.org
> http://www.zope.org/mailman/listinfo/zope
> 
> (For developer-specific issues, use the companion list,
> zope-dev@zope.org - http://www.zope.org/mailman/listinfo/zope-dev )
>