Changeset 1735

Timestamp:

21.11.2011 22:15:56 (6 months ago)

Author:

zmsdev

Message:

added support for synchronization of role-permissions (reported by desy).

File:

• ZMS/trunk/_accessmanager.py (modified) (2 diffs)

ZMS/trunk/_accessmanager.py

@@ -276 +276 @@
       return public
 
+
     # --------------------------------------------------------------------------
     #  AccessableObject.synchronizePublicAccess:
@@ -350 +351 @@
 ################################################################################
 class AccessableContainer(AccessableObject): 
+
+    # --------------------------------------------------------------------------
+    #  AccessableContainer.synchronizeRolesAccess:
+    # --------------------------------------------------------------------------
+    def synchronizeRolesAccess(self):
+      message = []
+      security_roles = self.getConfProperty('ZMS.security.roles',{})
+      for id in security_roles.keys():
+        self.manage_role(role_to_manage=id,permissions=[])
+        message.append("id="+id)
+        d = security_roles.get(id,{})
+        for node in d.keys():
+          message.append("node="+node)
+          ob = self.getLinkObj(node)
+          if ob is not None:
+            message.append("ob="+ob.absolute_url())
+            roles = d[node]['roles']
+            message.append("roles="+str(roles))
+            permissions = []
+            for role in roles:
+              permissions = ob.concat_list(permissions,role_permissions(self,role.replace(' ','')))
+            message.append("permissions="+str(permissions))
+            ob.manage_role(role_to_manage=id,permissions=permissions)
+      return '\n'.join(message)
+
 
     # --------------------------------------------------------------------------