Skip to content

erp5
erp5
Commit 21950585 authored by Fabien Morin's avatar Fabien Morin
Browse files
Options

Base_setDefaultSecurity has been launch on web_site module to be compatible... 

Base_setDefaultSecurity has been launch on web_site module to be compatible with erp5 conventions. Keep compatibility with anonymous roles by giving him "view" and "accessConntentInformation" permissions.

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@29690 20353a03-c40f-0410-a6d1-a30d3c3de9de
parent 81ea431c
Hide whitespace changes
Inline Side-by-side
Showing with 384 additions and 223 deletions
bt5/erp5_web/ModuleTemplateItem/web_site_module.xml
View file @ 21950585
<module>
<id>web_site_module</id>
<permission_list>
<permission type='list'>
<permission type='tuple'>
<name>Access Transient Objects</name>
<role>Assignee</role>
<role>Assignor</role>
<role>Associate</role>
<role>Auditor</role>
<role>Author</role>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Access arbitrary user session data</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Access contents information</name>
<role>Anonymous</role>
<role>Assignee</role>
<role>Assignor</role>
<role>Associate</role>
<role>Auditor</role>
<role>Author</role>
<role>Manager</role>
<role>Owner</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Access future portal content</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Access inactive portal content</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Access session data</name>
<role>Assignee</role>
<role>Assignor</role>
<role>Associate</role>
<role>Auditor</role>
<role>Author</role>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Accelerated HTTP Cache Managers</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add BTreeFolder2s</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Browser Id Manager</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add CMF Action Icons Tools</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add CMF Active Processs</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add CMF Caching Policy Managers</name>
<role>Manager</role>
</permission>
<permission type='tuple'>
<name>Add CMF Calendar Tools</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add CMF Core Tools</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add CMF Default Tools</name>
<role>Manager</role>
</permission>
<permission type='list'>
<name>Add CMF Groups Tools</name>
</permission>
<permission type='list'>
<name>Add CMF Report Tools</name>
<permission type='tuple'>
<name>Add CMF Setup Tools</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add CMF Sites</name>
<role>Manager</role>
</permission>
<permission type='tuple'>
<name>Add CMF Unique Id Tools</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add CMFActivity Tools</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add CMFCategory Tools</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add CMFMailIn Tools</name>
<role>Manager</role>
</permission>
<permission type='tuple'>
<name>Add Configured CMF Sites</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Content Type Registrys</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Cookie Crumblers</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Database Methods</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Documents, Images, and Files</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add ERP5 Filesystem Formulator Forms</name>
<role>Manager</role>
</permission>
<permission type='tuple'>
<name>Add ERP5 Form Printouts</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add ERP5 Forms</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add ERP5 OOo Templates</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add ERP5 PDF Forms</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add ERP5 PDF Templates</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add ERP5 Publications</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add ERP5 Reports</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add ERP5 Sites</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add ERP5 Subscriptions</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add ERP5 Tools</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add ERP5Catalog Tools</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add ERP5Form Tools</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add ERP5Subversion Tools</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add ERP5SyncML Tools</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add ERP5Type Tools</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add ExtFiles</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add ExtImages</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add External Methods</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Filesystem Directory Views</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Folders</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Formulator Forms</name>
<role>Manager</role>
</permission>
<permission type='list'>
<name>Add GroupUserFolder</name>
</permission>
<permission type='list'>
<name>Add GroupUserFolders</name>
</permission>
<permission type='list'>
<name>Add Groups</name>
</permission>
<permission type='list'>
<name>Add KZMailmans</name>
<permission type='tuple'>
<name>Add HBTreeFolder2s</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add LocalContents</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add LocalFolders</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Localizers</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add MailHost objects</name>
<role>Manager</role>
</permission>
<permission type='list'>
<name>Add Mailman List Member</name>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add MessageCatalogs</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add MimetypesRegistry Tools</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Page Templates</name>
<role>Manager</role>
</permission>
<permission type='list'>
<name>Add Photo Folders</name>
</permission>
<permission type='list'>
<name>Add Photos</name>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Pluggable Index</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Plugin Registrys</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add PortalTransforms Tools</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Python Scripts</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add RAM Cache Managers</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add ReStructuredText Documents</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Session Data Manager</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Site Roots</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Temporary Folder</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Transient Object Container</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add User Folders</name>
<role>Manager</role>
</permission>
<permission type='list'>
<name>Add Versions</name>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Virtual Host Monsters</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Vocabularies</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Z Gadfly Database Connections</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Z MySQL Database Connections</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Z MySQL Deferred Database Connections</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add ZCatalogs</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add ZMailIn Clients</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add ZMailMessages</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add ZODB Mount Points</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add Zope Tutorials</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add portal content</name>
<role>Assignor</role>
<role>Author</role>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add portal events</name>
<role>Manager</role>
</permission>
<permission type='tuple'>
<name>Add portal folders</name>
<role>Assignor</role>
<role>Author</role>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add portal member</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Add portal topics</name>
<role>Manager</role>
</permission>
<permission type='list'>
<name>Add secure MailHost objects</name>
</permission>
<permission type='list'>
<name>Admin KZMailman</name>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change Browser Id Manager</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change DTML Documents</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change DTML Methods</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change Database Connections</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change Database Methods</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change ExtFile/ExtImage</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change External Methods</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change Formulator Fields</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change Formulator Forms</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change Images and Files</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change Lock Information</name>
<role>Manager</role>
</permission>
<permission type='list'>
<name>Change Mailman List Options</name>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change Page Templates</name>
<role>Manager</role>
</permission>
<permission type='list'>
<name>Change Photo</name>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change Python Scripts</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change Session Data Manager</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change Versions</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change ZMailIn</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change ZMailMessages</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change bindings</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change cache managers</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change cache settings</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change configuration</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change local roles</name>
<role>Assignor</role>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change permissions</name>
<role>Manager</role>
</permission>
<permission type='tuple'>
<name>Change portal events</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change portal topics</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Change proxy roles</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Copy or Move</name>
<role>Assignee</role>
<role>Assignor</role>
<role>Associate</role>
<role>Auditor</role>
<role>Author</role>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Create Transient Objects</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Create class instances</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Define permissions</name>
<role>Manager</role>
</permission>
<permission type='list'>
<name>Delete Groups</name>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Delete objects</name>
<role>Assignor</role>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Download ExtFile/ExtImage</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Edit Factories</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Edit ReStructuredText</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Edit target</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>FTP access</name>
<role>Manager</role>
</permission>
<permission type='list'>
<name>Get Mailman List Members</name>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Import/Export objects</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Join/leave Versions</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>List folder contents</name>
<role>Assignee</role>
<role>Assignor</role>
<role>Associate</role>
<role>Auditor</role>
<role>Author</role>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>List portal members</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>List undoable changes</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Log Site Errors</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Log to the Event Log</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Mail forgotten password</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Manage Access Rules</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Manage Groups</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Manage Selenium test cases</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Manage Transient Object Container</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Manage Vocabulary</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Manage WebDAV Locks</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Manage Z Classes</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Manage ZCatalog Entries</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Manage ZCatalogIndex Entries</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Manage extensions</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Manage languages</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Manage messages</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Manage portal</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Manage properties</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Manage users</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Modify Cookie Crumblers</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Modify portal content</name>
<role>Assignor</role>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Open/Close Database Connection</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Open/Close Database Connections</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Post mail to ZMailIn</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Query Vocabulary</name>
<role>Manager</role>
</permission>
<permission type='list'>
<name>Remove Mailman List Member</name>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Reply to item</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Request review</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Review portal content</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Save/discard Version changes</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Search ZCatalog</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Search for principals</name>
<role>Manager</role>
</permission>
<permission type='list'>
<name>Set Group Ownership</name>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Set own password</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Set own properties</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Take ownership</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Test Database Connections</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Translate Content</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Undo changes</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Use Database Methods</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Use Factories</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Use external editor</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>Use mailhost services</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>View</name>
<role>Anonymous</role>
<role>Assignee</role>
<role>Assignor</role>
<role>Associate</role>
<role>Auditor</role>
<role>Manager</role>
<role>Owner</role>
</permission>
<permission type='list'>
<name>View Groups</name>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>View History</name>
<role>Assignee</role>
<role>Assignor</role>
<role>Associate</role>
<role>Auditor</role>
<role>Author</role>
<role>Manager</role>
</permission>
<permission type='list'>
<name>View KZMailman</name>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>View ZMailMessage</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>View management screens</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>WebDAV Lock items</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>WebDAV Unlock items</name>
<role>Manager</role>
</permission>
<permission type='list'>
<permission type='tuple'>
<name>WebDAV access</name>
<role>Manager</role>
</permission>
</permission_list>
<portal_type>Web Site Module</portal_type>
......
bt5/erp5_web/bt/revision
View file @ 21950585
861
\ No newline at end of file
863
\ No newline at end of file
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment
GitLab Nexedi Edition | About GitLab | About Nexedi | 沪ICP备2021021310号-2 | 沪ICP备2021021310号-7