[Zope] Adding Security permissions/roles to a product

Jens Vagelpohl jens@zope.com
Wed, 7 May 2003 14:00:30 -0400


using the __ac_permissions__ construct is way way deprecated. use=20
ClassSecurityInfo instead.

jens


On Wednesday, May 7, 2003, at 11:59 US/Eastern, MidnightFears@aol.com=20
wrote:

> In researching how to implement customized security for my product, I=20=

> have seen two ways to approach this. The first is through the=20
> __ac__permissions and the second is through the use of the=20
> ClassSecurityInfo.
>
> In attempting the first way, I declared the following in my class:
>
> =A0=A0 __ac_permissions__=3D Folder.__ac_permissions__ + (
> =A0=A0=A0=A0=A0 ('View',
> =A0=A0=A0=A0=A0=A0=A0=A0=A0 ('Administrator', 'Manager', 'Custodian', =
'Restricted=20
> Access'),
> =A0=A0=A0=A0=A0 ),
> =A0=A0=A0=A0=A0 ('Access contents information',
> =A0=A0=A0=A0=A0=A0=A0=A0=A0 ('Administrator', 'Manager', 'Custodian', =
'Restricted=20
> Access'),
> =A0=A0=A0=A0=A0 ),
> =A0=A0=A0=A0=A0 ('View management screens',
> =A0=A0=A0=A0=A0=A0=A0=A0=A0 ('manage', 'manage_main', =
'manage_workspace',),
> =A0=A0=A0=A0=A0=A0=A0=A0=A0 ('Administrator', 'Manager', 'Custodian', =
'Restricted=20
> Access'),
> =A0=A0=A0=A0=A0 ),
>
> =A0=A0 )
>
> Nothing spectacular here, however, the Custodian can't get access to=20=

> any of the management screens. I am pulling my hair out over this one.
>
> What am I doing wrong? Should I be using the ClassSecurityInfo=20
> instead? Does anyone have a good resource that will show me how to go=20=

> about implementing security?
>
> Thanks in advance!!
>