log roundup/security.py @ 4686:4e740f02e165

age author description
Thu, 21 Oct 2010 08:59:43 +0000 Ralf Schlatterbeck more fixes to search permissions:
Wed, 20 Oct 2010 20:24:09 +0000 Ralf Schlatterbeck - admin permissions are special:
Wed, 20 Oct 2010 08:58:52 +0000 Ralf Schlatterbeck search permissions must allow transitive properties
Tue, 19 Oct 2010 15:29:05 +0000 Ralf Schlatterbeck - Add explicit "Search" permissions, see Security Fix below.
Tue, 15 Dec 2009 15:11:27 +0000 Ralf Schlatterbeck Clean up all the places where role processing occurs.
Thu, 12 Mar 2009 02:25:03 +0000 Richard Jones Plug a number of security holes:
Fri, 03 Feb 2006 04:04:37 +0000 Richard Jones fix security check for hasPermission(Permission, None)
Fri, 28 Jan 2005 03:51:19 +0000 Richard Jones Permissions improvements.
Wed, 26 Jan 2005 17:27:21 +0000 Alexander Smishlajev fix Permission.__repr__() maint-0.8
Tue, 07 Dec 2004 23:32:50 +0000 Richard Jones more doc fixes
Tue, 30 Nov 2004 08:32:57 +0000 Richard Jones Stuff from the train ride this morning:
Wed, 27 Oct 2004 05:21:14 +0000 Richard Jones uh
Thu, 07 Oct 2004 23:10:07 +0000 Richard Jones admin needs create too
Wed, 28 Jul 2004 06:30:40 +0000 Alexander Smishlajev add note about new functionality to Permission class docstring;
Wed, 28 Jul 2004 02:29:46 +0000 Richard Jones Buncha stuff (sorry about the large checkin):
Wed, 11 Feb 2004 23:55:10 +0000 Richard Jones documentation cleanup
Sat, 10 May 2003 23:13:10 +0000 Richard Jones strip whitespace from Role names so "User, Admin" will work
Thu, 13 Mar 2003 09:27:24 +0000 Andrey Lebedev role names made case insensitive
Thu, 26 Sep 2002 00:02:24 +0000 Richard Jones more docco work
Tue, 10 Sep 2002 00:19:55 +0000 Richard Jones removed Log
Fri, 30 Aug 2002 08:37:00 +0000 Richard Jones new CGI frontend support
Fri, 16 Aug 2002 04:26:00 +0000 Richard Jones preparation for moving cgi modules around
Mon, 29 Jul 2002 21:53:29 +0000 Richard Jones Fix to hasPermission, thanks Stefan Seefeld.
Mon, 29 Jul 2002 00:56:06 +0000 Richard Jones Removed the unnecessary volatiledb and the related complications.
Fri, 26 Jul 2002 08:27:00 +0000 Richard Jones Very close now. The cgi and mailgw now use the new security API.
Thu, 25 Jul 2002 07:14:06 +0000 Richard Jones Bugger it. Here's the current shape of the new security implementation.

Roundup Issue Tracker: http://roundup-tracker.org/