1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
|
====================
zope.security.zcml
====================
.. currentmodule:: zope.security.zcml
Most users will not directly need to access the contents of this
module; they will probably just :ref:`configure via ZCML <via-zcml>`.
API Reference
=============
.. autoclass:: Permission
Let's look at an example:
.. doctest::
>>> from zope.security.zcml import Permission
>>> class FauxContext(object):
... permission_mapping = {'zope.ManageCode':'zope.private'}
... _actions = []
... def action(self, **kws):
... self._actions.append(kws)
>>> context = FauxContext()
>>> field = Permission().bind(context)
Let's test the fromUnicode method:
.. doctest::
>>> field.fromUnicode(u'zope.foo')
'zope.foo'
>>> field.fromUnicode(u'zope.ManageCode')
'zope.private'
Now let's see whether validation works alright
.. doctest::
>>> field._validate('zope.ManageCode')
>>> context._actions[0]['args']
(None, 'zope.foo')
>>> from zope.schema.interfaces import InvalidId
>>> try:
... field._validate('3 foo')
... except InvalidId as e:
... e
InvalidId('3 foo')
zope.Public is always valid
>>> field._validate('zope.Public')
.. autointerface:: ISecurityPolicyDirective
.. autofunction:: securityPolicy
.. autointerface:: IPermissionDirective
.. autofunction:: permission
.. autointerface:: IRedefinePermission
.. autofunction:: redefinePermission
.. _via-zcml:
Configuring security via ZCML
=============================
:mod:`zope.security` provides a ZCML file that configures some
utilities and a couple of standard permissions:
.. doctest::
>>> from zope.component import getGlobalSiteManager
>>> from zope.configuration.xmlconfig import XMLConfig
>>> from zope.component.testing import setUp
>>> import zope.security
>>> setUp() # clear global component registry
>>> XMLConfig('permissions.zcml', zope.security)()
>>> len(list(getGlobalSiteManager().registeredUtilities()))
7
Clear the current state:
.. doctest::
>>> from zope.component.testing import setUp, tearDown
>>> tearDown()
>>> setUp()
>>> XMLConfig('configure.zcml', zope.security)()
>>> len(list(getGlobalSiteManager().registeredUtilities()))
10
|
