[Zope3-checkins] CVS: Zope3/src/zope/security - readme.txt:1.5
Chris McDonough
chrism at plope.com
Wed Jan 14 17:56:06 EST 2004
Update of /cvs-repository/Zope3/src/zope/security
In directory cvs.zope.org:/tmp/cvs-serv5558/src/zope/security
Modified Files:
readme.txt
Log Message:
Merge security policy refactoring:
- Moved all role- and grant-related functionality into
zope.products.securitypolicy (and out of zope.app.security.grant).
The zope.products.securitypolicy implementation is exactly
the same as the old implementation; no changes were made
to the actual mechanics of role-permission or principal-permission
grants. The only real difference is that all functionality
that is the purview of what we want a security policy to have
control of is now in that one place.
- Created new modulealias directive which can be used to provide
aliases to older modules (to not break existing ZODBs when
module locations change).
- Added minor feature: "make debug" launches a debug session in the
spirit of Zope 2's "zopectl debug".
=== Zope3/src/zope/security/readme.txt 1.4 => 1.5 ===
--- Zope3/src/zope/security/readme.txt:1.4 Thu Jul 31 12:50:56 2003
+++ Zope3/src/zope/security/readme.txt Wed Jan 14 17:55:35 2004
@@ -12,8 +12,7 @@
Principal
- A generalization of a concept of a user. A principal may be
- associated with different roles and permissions.
+ A generalization of a concept of a user.
Permission
@@ -21,12 +20,6 @@
WRITE. Fundamentally the whole security framework is organized
around checking permissions on objects.
- Roles
-
- Represents a responsibility of a user in the context of an
- object. Roles are associated with the permissions necessary to
- fulfill the user's responsibility.
-
Purpose
The security framework's primary purpose is to guard and check
@@ -303,11 +296,10 @@
A Zope3 programmer will never commonly need to interact with the
low level security framework. Zope3 defines a second security
- package over top the low level framework that implements concepts
- of roles, and authentication sources and checkers are handled
- via zcml registration. Still those developing Zope3 will
- hopefully find this useful as an introduction into the
- underpinnings of the security framework.
+ package over top the low level framework and authentication
+ sources and checkers are handled via zcml registration. Still
+ those developing Zope3 will hopefully find this useful as an
+ introduction into the underpinnings of the security framework.
Code
More information about the Zope3-Checkins
mailing list