[Zope3-dev] Re: full closure of group membership

Gary Poster gary at zope.com
Fri Jan 13 14:50:47 EST 2006


On Jan 12, 2006, at 8:35 PM, Gary Poster wrote:

>
> On Jan 12, 2006, at 7:16 PM, Florent Guillaume wrote:
>
>> Do you think your interfaces fit the need of "computed" groups?
>
> The current IPrincipal interface has a bit of a problem for  
> computed groups but is pretty close, I'd say.  Right now, the core  
> principal interface in zope.security says that `groups` is a list.   
> A list that has an unremovable member--a calculated group--is a bit  
> hacky to model, so you might want to have a different API for  
> mutating the groups--or maybe it's *all* calculated and imutable.   
> If this core interface were restricted to say that `groups` is a  
> readonly iterable (which would be sufficient for the security  
> policies I know, AFAIK), and then another interface extended it to  
> match the current interface (a list), then the core interface would  
> allow other principal implementations to determine the `groups`  
> value in other ways.

It turns out I'll be doing this as well as part of my changes.

Gary


More information about the Zope3-dev mailing list