[Checkins] SVN: z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/ missing security declarations. Just 1 failure remaining
Christophe Combelles
ccomb at free.fr
Sat Apr 24 12:34:30 EDT 2010
Log message for revision 111366:
missing security declarations. Just 1 failure remaining
Changed:
U z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/addressbook/README.txt
U z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/addressbook/configure.zcml
U z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/application.zcml
U z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/spreadsheet/configure.zcml
U z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/widgets/configure.zcml
-=-
Modified: z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/addressbook/README.txt
===================================================================
--- z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/addressbook/README.txt 2010-04-24 15:09:56 UTC (rev 111365)
+++ z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/addressbook/README.txt 2010-04-24 16:34:30 UTC (rev 111366)
@@ -17,8 +17,6 @@
Since all demos are purely public, there is no need to log in. Let's now click
on the "Address Book" link:
- >>> user.handleErrors = False
-
>>> user.getLink('Address Book').click()
There is only one screen for this demo. In it you see the table of all
@@ -102,6 +100,9 @@
By clicking on the name, the edit form for Stephan is shown:
+ >>> user.handleErrors = False
+ >>> print user.contents
+
>>> user.getLink('Richter').click()
Note that the row is highlighted now:
Modified: z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/addressbook/configure.zcml
===================================================================
--- z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/addressbook/configure.zcml 2010-04-24 15:09:56 UTC (rev 111365)
+++ z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/addressbook/configure.zcml 2010-04-24 16:34:30 UTC (rev 111366)
@@ -6,12 +6,26 @@
<!-- Content Security Declarations -->
+ <class class="zope.app.container.btree.BTreeContainer">
+ <require permission="zope.Public"
+ interface="zope.app.container.interfaces.IContainer" />
+ <require permission="zope.Public"
+ set_schema="zope.app.container.interfaces.IContainer" />
+ </class>
+
<class class=".contact.Address">
<allow interface=".interfaces.IAddress" />
<require permission="zope.Public"
set_schema=".interfaces.IAddress" />
</class>
+ <class class=".contact.EMails">
+ <require permission="zope.Public"
+ interface="zope.app.container.interfaces.IContainer" />
+ <require permission="zope.Public"
+ set_schema="zope.app.container.interfaces.IContainer" />
+ </class>
+
<class class=".contact.EMail">
<allow interface=".interfaces.IEMail" />
<require permission="zope.Public"
Modified: z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/application.zcml
===================================================================
--- z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/application.zcml 2010-04-24 15:09:56 UTC (rev 111365)
+++ z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/application.zcml 2010-04-24 16:34:30 UTC (rev 111366)
@@ -64,9 +64,10 @@
<grantAll role="zope.Anonymous" />
<class class="zope.app.folder.folder.Folder">
+ <implements interface="zope.annotation.interfaces.IAttributeAnnotatable" />
<require permission="zope.Public"
- interface="zope.app.container.interfaces.IReadContainer" />
+ interface="zope.app.folder.interfaces.IFolder" />
<require permission="zope.Public"
- interface="zope.app.container.interfaces.IWriteContainer" />
+ set_schema="zope.app.folder.interfaces.IFolder" />
</class>
</configure>
Modified: z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/spreadsheet/configure.zcml
===================================================================
--- z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/spreadsheet/configure.zcml 2010-04-24 15:09:56 UTC (rev 111365)
+++ z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/spreadsheet/configure.zcml 2010-04-24 16:34:30 UTC (rev 111366)
@@ -1,8 +1,17 @@
<configure
xmlns="http://namespaces.zope.org/browser"
+ xmlns:zope="http://namespaces.zope.org/zope"
xmlns:z3c="http://namespaces.zope.org/z3c"
i18n_domain="z3c.formdemo">
+ <!-- security declaration -->
+ <zope:class class=".content.Candidate">
+ <zope:require permission="zope.Public"
+ interface=".content.ICandidate" />
+ <zope:require permission="zope.Public"
+ set_schema=".content.ICandidate" />
+ </zope:class>
+
<!-- Resources -->
<resourceDirectory
Modified: z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/widgets/configure.zcml
===================================================================
--- z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/widgets/configure.zcml 2010-04-24 15:09:56 UTC (rev 111365)
+++ z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/widgets/configure.zcml 2010-04-24 16:34:30 UTC (rev 111366)
@@ -4,6 +4,13 @@
xmlns:z3c="http://namespaces.zope.org/z3c"
i18n_domain="z3c.formdemo">
+<class class=".browser.AllFields">
+ <require permission="zope.Public"
+ interface=".interfaces.IAllFields" />
+ <require permission="zope.Public"
+ set_schema=".interfaces.IAllFields" />
+</class>
+
<browser:resource
name="pressme.png"
file="pressme.png"
@@ -20,6 +27,7 @@
<adapter
factory=".browser.getAllFields"
+ trusted="yes"
/>
</configure>
More information about the checkins
mailing list