[Checkins] SVN: z3c.securitytool/trunk/ New Release

Daniel Blackburn blackburnd at gmail.com
Thu Feb 7 15:44:14 EST 2008


Log message for revision 83654:
  New Release

Changed:
  U   z3c.securitytool/trunk/CHANGES.txt
  U   z3c.securitytool/trunk/setup.py
  U   z3c.securitytool/trunk/src/z3c/securitytool/README.txt
  U   z3c.securitytool/trunk/src/z3c/securitytool/browser/permdetails.pt
  U   z3c.securitytool/trunk/src/z3c/securitytool/browser/principalinfo.pt
  U   z3c.securitytool/trunk/src/z3c/securitytool/browser/viewprincipalmatrix.pt
  U   z3c.securitytool/trunk/src/z3c/securitytool/securitytool.py

-=-
Modified: z3c.securitytool/trunk/CHANGES.txt
===================================================================
--- z3c.securitytool/trunk/CHANGES.txt	2008-02-07 20:34:23 UTC (rev 83653)
+++ z3c.securitytool/trunk/CHANGES.txt	2008-02-07 20:44:14 UTC (rev 83654)
@@ -4,6 +4,14 @@
 
 
 
+Version 0.3.0 (2008-02-07)
+--------------------------
+- Updated interfaces and views
+- Cleanup of page templates
+- Storing selected skin in session
+- Various bug fixes
+- Better project description
+
 Version 0.2.4 (2008-02-06)
 --------------------------
 - Fixed bug in permDetails

Modified: z3c.securitytool/trunk/setup.py
===================================================================
--- z3c.securitytool/trunk/setup.py	2008-02-07 20:34:23 UTC (rev 83653)
+++ z3c.securitytool/trunk/setup.py	2008-02-07 20:44:14 UTC (rev 83654)
@@ -27,7 +27,7 @@
 
 setup (
     name='z3c.securitytool',
-    version='0.2.4',
+    version='0.3.0',
     author = "Daniel Blackburn, Martin Hefler, Markus Kemmerl, Stephan Richter, Randy Crafton",
     author_email = "zope3-dev at zope.org",
     description = "A security audit tool and demo for Zope3 views",

Modified: z3c.securitytool/trunk/src/z3c/securitytool/README.txt
===================================================================
--- z3c.securitytool/trunk/src/z3c/securitytool/README.txt	2008-02-07 20:34:23 UTC (rev 83653)
+++ z3c.securitytool/trunk/src/z3c/securitytool/README.txt	2008-02-07 20:44:14 UTC (rev 83654)
@@ -1,7 +1,3 @@
-;; This buffer is for notes you don't want to save, and for Lisp evaluation.
-;; If you want to create a file, visit that file with C-x C-f,
-;; then enter the text in that file's own buffer.
-
 ==============
 z3c.securitytool
 ================
@@ -384,7 +380,7 @@
 
 
     >>> first._permissionDetails(daniel, 'takeOverTheWORLD',
-    ...                          [['viewName',settings]])
+    ...                          [['viewName',settings]],[rolePermMap])
     {'groups': {},
      'roles': {'Janitor': [{'setting': 'Allow', 'name': 'viewName'}]},
      'permissions': [{'setting': 'Allow', 'name': 'viewName'}]}

Modified: z3c.securitytool/trunk/src/z3c/securitytool/browser/permdetails.pt
===================================================================
--- z3c.securitytool/trunk/src/z3c/securitytool/browser/permdetails.pt	2008-02-07 20:34:23 UTC (rev 83653)
+++ z3c.securitytool/trunk/src/z3c/securitytool/browser/permdetails.pt	2008-02-07 20:44:14 UTC (rev 83654)
@@ -12,7 +12,9 @@
    <p class="description"> The permission settings for the
    intersection of the view and principal are displayed here. This
    view displays the permissions, roles, and groups applied to the
-   view and principal previously selected on the securityMatrix.html page. You
+   view and principal previously selected on the securityMatrix.html
+   page. These are the settings that directly determine what the
+   security settings are for the intersection selected. You
    can go back to the matrix page by selecting the `Security
    Matrix` link above. </p>
 
@@ -34,12 +36,17 @@
             <h3 tal:condition="permissions">Permissions directly
             responsible for access</h3>
             <div class="contentList"  tal:condition="permissions">
+                <ul>
                 <span tal:repeat="permission permissions">
+                <li class="contentList">
                 <span tal:content="view/read_perm"/>
                 <span tal:attributes="class permission/setting" 
                        tal:content="permission/name"></span>
-                <br>
+                </li>
                 </span>
+               
+                </ul>
+
              </div>
              <br tal:condition="permissions">
 
@@ -47,14 +54,20 @@
               access</h3>
               <div class="contentList" tal:condition="roles">
                  <div tal:repeat="role_context roles">
-                    <span tal:content="role_context" />: 
-                    <span tal:repeat="perm
-                                      python:roles[role_context]">
-                        <span tal:attributes="class perm/setting" 
-                              tal:content="perm/name"/>
-                        <span tal:condition="not:repeat/perm/end" 
-                              tal:replace="string:,"/>
-                    </span>
+                    <ul>
+                    <li class="contentList">
+
+                        <span tal:content="role_context" />: 
+                        <span tal:repeat="perm
+                                          python:roles[role_context]">
+                            <span tal:attributes="class perm/setting" 
+                                  tal:content="perm/name"/>
+                            <span tal:condition="not:repeat/perm/end" 
+                                  tal:replace="string:,"/>
+                        </span>
+                      </li>
+
+                    </ul>
                   </div>
                 </div>
                 

Modified: z3c.securitytool/trunk/src/z3c/securitytool/browser/principalinfo.pt
===================================================================
--- z3c.securitytool/trunk/src/z3c/securitytool/browser/principalinfo.pt	2008-02-07 20:34:23 UTC (rev 83653)
+++ z3c.securitytool/trunk/src/z3c/securitytool/browser/principalinfo.pt	2008-02-07 20:44:14 UTC (rev 83654)
@@ -30,7 +30,7 @@
                   <div class="contentList"  tal:repeat="permissionItem permissions" >
                     <tal:block tal:repeat="permission permissionItem">
                     <ul>
-                        <li>
+                        <li class="contentList">
                          <span tal:content="permission/permission"/>
                          <span tal:attributes="class permission/setting"
                               tal:content="permission/setting"/>

Modified: z3c.securitytool/trunk/src/z3c/securitytool/browser/viewprincipalmatrix.pt
===================================================================
--- z3c.securitytool/trunk/src/z3c/securitytool/browser/viewprincipalmatrix.pt	2008-02-07 20:34:23 UTC (rev 83653)
+++ z3c.securitytool/trunk/src/z3c/securitytool/browser/viewprincipalmatrix.pt	2008-02-07 20:44:14 UTC (rev 83654)
@@ -15,12 +15,19 @@
 views for any given component and context. We also provide two further
 levels of detail. You can view the details of how a user came to have
 the permission on a given view, by clicking on the permission in the
-matrix, or by discriminating by a specific skin.
+matrix. You may also select a specific principal at the top of the
+table and see all permissions roles and groups assigned to that
+principal.  The skin selection is very relevant when it comes to
+security settings and is very likely to change what you see on this
+page when you change skins.
+
 </p>
    <form action="." method="POST"
+             name="form"
              tal:attributes="action request/URL">
       <p class="matrix_body">Select a skin:
-         <select name="selectedSkin">
+         <select name="selectedSkin"
+          tal:attributes="onchange string:javascript:document.form.submit()">
             <option value="SkinType"
                tal:repeat="skinName view/skinTypes"
                tal:attributes="value skinName; 

Modified: z3c.securitytool/trunk/src/z3c/securitytool/securitytool.py
===================================================================
--- z3c.securitytool/trunk/src/z3c/securitytool/securitytool.py	2008-02-07 20:34:23 UTC (rev 83653)
+++ z3c.securitytool/trunk/src/z3c/securitytool/securitytool.py	2008-02-07 20:44:14 UTC (rev 83654)
@@ -272,14 +272,17 @@
 
         # Here we want to aggregate all the rolePermissions in one place
         rolePermissions = []
-        for name,setting in settings:
-            if setting.get('rolePermissions',''):
-                rolePermissions.extend(setting['rolePermissions'])
+        if not settings:
+            return  {'read_perm':'zope.Public','permissions': [],'roles': {},'groups': {}}
 
         if read_perm is None:
             prinPermSettings = {'permissions': [],'roles': {},'groups': {}}
             read_perm ='zope.Public'
         else:        
+            for name,setting in settings:
+                if setting.get('rolePermissions',''):
+                    rolePermissions.extend(setting['rolePermissions'])
+
             prinPermSettings = self._permissionDetails(principal, read_perm,
                                                        settings,rolePermissions)
 



More information about the Checkins mailing list