Mercurial > p > roundup > code
comparison doc/upgrading.txt @ 4444:8137456a86f3
more fixes to search permissions:
- require that for links and multilinks the searching user has access to
at least the orderprop, labelprop, and ID of the linked class
- allow combinations of roles: we previosly required that for transitive
properties all elements where searchable by the same role. We now
allow that the roles can be different for each property. This allows
assigning different roles to different sub-systems and allowing users
having all required roles to search across subsystems.
- regression test updated
- fix doc/upgrading example for new signature of roleHasSearchPermission
| author | Ralf Schlatterbeck <schlatterbeck@users.sourceforge.net> |
|---|---|
| date | Thu, 21 Oct 2010 08:59:43 +0000 |
| parents | 261c9f913ff7 |
| children | 52e13bf0bb40 |
comparison
equal
deleted
inserted
replaced
| 4443:9edbab31e2ac | 4444:8137456a86f3 |
|---|---|
| 45 print "Class:", cl | 45 print "Class:", cl |
| 46 for p in sorted(db.getclass(cl).properties.keys()): | 46 for p in sorted(db.getclass(cl).properties.keys()): |
| 47 print " Property:", p | 47 print " Property:", p |
| 48 roles = [] | 48 roles = [] |
| 49 for role in sorted(db.security.role.iterkeys()): | 49 for role in sorted(db.security.role.iterkeys()): |
| 50 if db.security.roleHasSearchPermission(role,cl,p): | 50 if db.security.roleHasSearchPermission(cl,p,role): |
| 51 roles.append(role) | 51 roles.append(role) |
| 52 print " roles may search:", ', '.join(roles) | 52 print " roles may search:", ', '.join(roles) |
| 53 | 53 |
| 54 | 54 |
| 55 Migrating from 1.4.x to 1.4.12 | 55 Migrating from 1.4.x to 1.4.12 |
