blob: 5fdc3a0b229c9f7989e934bcf83bc9bb5a7bbf72 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
|
:mod:`zope.security.zcml`
===============================
Configuring security via ZCML
-----------------------------
:mod:`zope.security` provides a ZCML file that configures some utilities and
a couple of permissions:
.. doctest::
>>> from zope.component import getGlobalSiteManager
>>> from zope.configuration.xmlconfig import XMLConfig
>>> import zope.security
>>> XMLConfig('permissions.zcml', zope.security)()
>>> len(list(getGlobalSiteManager().registeredUtilities()))
7
Clear the current state:
.. doctest::
>>> from zope.component.testing import setUp, tearDown
>>> tearDown()
>>> setUp()
>>> XMLConfig('configure.zcml', zope.security)()
>>> len(list(getGlobalSiteManager().registeredUtilities()))
10
.. autoclass:: zope.security.zcml.Permission
:members:
:member-order: bysource
Let's look at an example:
.. doctest::
>>> from zope.security.zcml import Permission
>>> class FauxContext(object):
... permission_mapping = {'zope.ManageCode':'zope.private'}
... _actions = []
... def action(self, **kws):
... self._actions.append(kws)
>>> context = FauxContext()
>>> field = Permission().bind(context)
Let's test the fromUnicode method:
.. doctest::
>>> field.fromUnicode(u'zope.foo')
'zope.foo'
>>> field.fromUnicode(u'zope.ManageCode')
'zope.private'
Now let's see whether validation works alright
.. doctest::
>>> field._validate('zope.ManageCode')
>>> context._actions[0]['args']
(None, 'zope.foo')
>>> field._validate('3 foo')
Traceback (most recent call last):
...
InvalidId: 3 foo
zope.Public is always valid
>>> field._validate('zope.Public')
.. autointerface:: zope.security.zcml.ISecurityPolicyDirective
:members:
:member-order: bysource
.. autofunction:: zope.security.zcml.securityPolicy
.. autointerface:: zope.security.zcml.IPermissionDirective
:members:
:member-order: bysource
.. autofunction:: zope.security.zcml.permission
.. autointerface:: zope.security.zcml.IRedefinePermission
:members:
:member-order: bysource
.. autofunction:: zope.security.zcml.redefinePermission
|
