[Zope3-checkins] SVN: Zope3/trunk/src/zope/app/securitypolicy/configure.zcml Okay, okay, the security was too tight.

[Stephan Richter]

Log message for revision 26506:
  Okay, okay, the security was too tight.
  


Changed:
  U   Zope3/trunk/src/zope/app/securitypolicy/configure.zcml


-=-
Modified: Zope3/trunk/src/zope/app/securitypolicy/configure.zcml
===================================================================
--- Zope3/trunk/src/zope/app/securitypolicy/configure.zcml	2004-07-13 19:04:10 UTC (rev 26505)
+++ Zope3/trunk/src/zope/app/securitypolicy/configure.zcml	2004-07-13 19:16:57 UTC (rev 26506)
@@ -19,8 +19,12 @@
            trusted="true" />
 
   <class class=".rolepermission.AnnotationRolePermissionManager">
-    <require permission="zope.Security"
-             interface=".interfaces.IRolePermissionManager" />
+    <require 
+        permission="zope.Security"
+        attributes="grantPermissionToRole denyPermissionToRole
+                    unsetPermissionFromRole" />
+    <allow 
+        interface=".interfaces.IRolePermissionMap" />
   </class>       
 
   <adapter factory=".principalrole.AnnotationPrincipalRoleManager"
@@ -29,8 +33,12 @@
            trusted="true" />
 
   <class class=".principalrole.AnnotationPrincipalRoleManager">
-    <require permission="zope.Security"
-             interface=".interfaces.IPrincipalRoleManager" />
+    <require 
+        permission="zope.Security"
+        attributes="assignRoleToPrincipal removeRoleFromPrincipal
+                    unsetRoleForPrincipal" />
+    <allow 
+        interface=".interfaces.IPrincipalRoleMap" />
   </class>
 
   <adapter factory=".principalpermission.AnnotationPrincipalPermissionManager"
@@ -39,8 +47,12 @@
            trusted="true"/>
 
   <class class=".principalpermission.AnnotationPrincipalPermissionManager">
-    <require permission="zope.Security"
-             interface=".interfaces.IPrincipalPermissionManager" />
+    <require 
+        permission="zope.Security"
+        attributes="grantPermissionToRole denyPermissionToRole
+                    unsetPermissionFromRole" />
+    <allow 
+        interface=".interfaces.IPrincipalPermissionMap" />
   </class>
 
   <!-- protect Roles and Permissions -->