[Zope3-checkins] CVS: Zope3/src/zope/products/securitypolicy -
configure.zcml:1.3 meta.zcml:1.3
Sidnei da Silva
sidnei at x3ng.com.br
Thu Jan 15 11:16:22 EST 2004
Update of /cvs-repository/Zope3/src/zope/products/securitypolicy
In directory cvs.zope.org:/tmp/cvs-serv10332/src/zope/products/securitypolicy
Modified Files:
configure.zcml meta.zcml
Log Message:
Reindent some files. Move grants and role definitions to zope.products.securitypolicy, as suggested by SteveA.
=== Zope3/src/zope/products/securitypolicy/configure.zcml 1.2 => 1.3 ===
--- Zope3/src/zope/products/securitypolicy/configure.zcml:1.2 Wed Jan 14 17:55:32 2004
+++ Zope3/src/zope/products/securitypolicy/configure.zcml Thu Jan 15 11:16:21 2004
@@ -3,86 +3,100 @@
<include file="meta.zcml"/>
<content class=".permissionroles.PermissionRoles">
- <require
- permission="zope.Security"
- attributes="roles rolesInfo"
- interface=".interfaces.IRegisteredObject" />
+ <require permission="zope.Security"
+ attributes="roles rolesInfo"
+ interface=".interfaces.IRegisteredObject" />
</content>
<content class=".rolepermission.RolePermissions">
- <require
- permission="zope.Security"
- attributes="permissions permissionsInfo"
- interface=".interfaces.IRegisteredObject" />
- </content>
-
- <adapter
- factory=".rolepermission.AnnotationRolePermissionManager"
- provides=".interfaces.IRolePermissionManager"
- for="zope.app.interfaces.annotation.IAnnotatable" />
-
- <adapter
- factory=".principalrole.AnnotationPrincipalRoleManager"
- provides=".interfaces.IPrincipalRoleManager"
- for="zope.app.interfaces.annotation.IAnnotatable" />
-
- <adapter
- factory=".principalpermission.AnnotationPrincipalPermissionManager"
- provides=".interfaces.IPrincipalPermissionManager"
- for="zope.app.interfaces.annotation.IAnnotatable" />
-
- <serviceType
- id="Roles"
- interface=".interfaces.IRoleService" />
-
- <service
- serviceType="Roles"
- component=".roleregistry.roleRegistry" />
+ <require permission="zope.Security"
+ attributes="permissions permissionsInfo"
+ interface=".interfaces.IRegisteredObject" />
+ </content>
+
+ <adapter factory=".rolepermission.AnnotationRolePermissionManager"
+ provides=".interfaces.IRolePermissionManager"
+ for="zope.app.interfaces.annotation.IAnnotatable" />
+
+ <adapter factory=".principalrole.AnnotationPrincipalRoleManager"
+ provides=".interfaces.IPrincipalRoleManager"
+ for="zope.app.interfaces.annotation.IAnnotatable" />
+
+ <adapter factory=".principalpermission.AnnotationPrincipalPermissionManager"
+ provides=".interfaces.IPrincipalPermissionManager"
+ for="zope.app.interfaces.annotation.IAnnotatable" />
+
+ <serviceType id="Roles"
+ interface=".interfaces.IRoleService" />
+
+ <service serviceType="Roles"
+ component=".roleregistry.roleRegistry" />
<!-- protect Roles and Permissions -->
<content class=".roleregistry.Role">
<allow interface=".interfaces.IRegisteredObject" />
</content>
-<!-- XXX (this came out of services/configure.zcml) Role Templates -->
+ <!-- XXX (this came out of services/configure.zcml) Role Templates -->
+
+ <content class=".role.RoleService">
+ <factory id="RoleService"
+ permission="zope.ManageServices"
+ />
+ <require permission="zope.Security"
+ interface=".interfaces.IRoleService"
+ />
+ <require permission="zope.ManageServices"
+ interface="zope.app.interfaces.container.IContainer"
+ />
+ </content>
+
+ <content class=".role.Role">
+ <factory />
+ <require permission="zope.Security"
+ interface=".interfaces.IRole"
+ />
+ </content>
+
+ <!-- create module aliases for users of persistent objects moved
+ during the course of refactoring -->
+
+ <modulealias module=".securitymap"
+ alias="zope.app.security.grants.securitymap"/>
-<content class=".role.RoleService">
- <factory
- id="RoleService"
- permission="zope.ManageServices"
- />
- <require
- permission="zope.Security"
- interface=".interfaces.IRoleService"
- />
- <require
- permission="zope.ManageServices"
- interface="zope.app.interfaces.container.IContainer"
- />
-</content>
-
-<content class=".role.Role">
- <factory />
- <require
- permission="zope.Security"
- interface=".interfaces.IRole"
- />
-</content>
-
-<!-- create module aliases for users of persistent objects moved
- during the course of refactoring -->
-
-<modulealias module=".securitymap"
- alias="zope.app.security.grants.securitymap"/>
-
-<modulealias module=".role"
- alias="zope.app.services.role" />
-
-<securityPolicy
- component=".zopepolicy.zopeSecurityPolicy"
- />
+ <modulealias module=".role"
+ alias="zope.app.services.role" />
-<include package=".browser"/>
+ <securityPolicy component=".zopepolicy.zopeSecurityPolicy"
+ />
+
+ <include package=".browser"/>
+
+
+ <configure i18n_domain="zope">
+ <role id="zope.Manager" title="Site Manager" />
+ <role id="zope.Member" title="Site Member" />
+ </configure>
+
+ <!-- Remove the following directive if you don't want public access -->
+ <grant permission="zope.View" role="zope.Anonymous" />
+
+ <grant permission="zope.View" role="zope.Manager" />
+ <grant permission="zope.ManageContent" role="zope.Manager" />
+ <grant permission="zope.Security" role="zope.Manager" />
+ <grant permission="zope.ManageCode" role="zope.Manager" />
+ <grant permission="zope.ManageServices" role="zope.Manager" />
+ <grant permission="zope.ManageApplication" role="zope.Manager" />
+ <grant permission="zope.ManageBindings" role="zope.Manager" />
+ <grant permission="zope.SendMail" role="zope.Manager" />
+
+ <!-- Grant Manager all necessary Permissions for using Workflows -->
+ <grant permission="zope.workflow.ManageProcessDefinitions"
+ role="zope.Manager" />
+ <grant permission="zope.workflow.CreateProcessInstances"
+ role="zope.Manager" />
+ <grant permission="zope.workflow.UseProcessInstances"
+ role="zope.Manager" />
</configure>
=== Zope3/src/zope/products/securitypolicy/meta.zcml 1.2 => 1.3 ===
--- Zope3/src/zope/products/securitypolicy/meta.zcml:1.2 Wed Jan 14 17:55:32 2004
+++ Zope3/src/zope/products/securitypolicy/meta.zcml Thu Jan 15 11:16:21 2004
@@ -1,17 +1,14 @@
-<configure
- xmlns="http://namespaces.zope.org/zope"
- xmlns:meta="http://namespaces.zope.org/meta">
+<configure xmlns="http://namespaces.zope.org/zope"
+ xmlns:meta="http://namespaces.zope.org/meta">
- <meta:directive
- namespace="http://namespaces.zope.org/zope"
- name="grant"
- schema=".metadirectives.IGrantDirective"
- handler=".metaconfigure.grant" />
+ <meta:directive namespace="http://namespaces.zope.org/zope"
+ name="grant"
+ schema=".metadirectives.IGrantDirective"
+ handler=".metaconfigure.grant" />
- <meta:directive
- namespace="http://namespaces.zope.org/zope"
- name="role"
- schema=".metadirectives.IDefineRoleDirective"
- handler=".metaconfigure.defineRole" />
+ <meta:directive namespace="http://namespaces.zope.org/zope"
+ name="role"
+ schema=".metadirectives.IDefineRoleDirective"
+ handler=".metaconfigure.defineRole" />
</configure>
More information about the Zope3-Checkins
mailing list