[Checkins] SVN: z3ext.layoutform/trunk/ Added missing security declarations

[Nikolay Kim]

Log message for revision 94804:
  Added missing security declarations

Changed:
  U   z3ext.layoutform/trunk/CHANGES.txt
  A   z3ext.layoutform/trunk/src/z3ext/layoutform/browser/buttons.zcml
  U   z3ext.layoutform/trunk/src/z3ext/layoutform/browser/configure.zcml
  U   z3ext.layoutform/trunk/src/z3ext/layoutform/browser/formview.pt
  A   z3ext.layoutform/trunk/src/z3ext/layoutform/browser/formview.py
  U   z3ext.layoutform/trunk/src/z3ext/layoutform/browser/interfaces.py
  U   z3ext.layoutform/trunk/src/z3ext/layoutform/configure.zcml

-=-
Modified: z3ext.layoutform/trunk/CHANGES.txt
===================================================================
--- z3ext.layoutform/trunk/CHANGES.txt	2009-01-17 16:52:50 UTC (rev 94803)
+++ z3ext.layoutform/trunk/CHANGES.txt	2009-01-17 17:12:08 UTC (rev 94804)
@@ -2,6 +2,12 @@
 CHANGES
 =======
 
+1.3.2 (Unreleased)
+------------------
+
+- Added missing security declarations
+
+
 1.3.1 (2008-12-25)
 ------------------
 

Added: z3ext.layoutform/trunk/src/z3ext/layoutform/browser/buttons.zcml
===================================================================
--- z3ext.layoutform/trunk/src/z3ext/layoutform/browser/buttons.zcml	                        (rev 0)
+++ z3ext.layoutform/trunk/src/z3ext/layoutform/browser/buttons.zcml	2009-01-17 17:12:08 UTC (rev 94804)
@@ -0,0 +1,38 @@
+<configure
+   xmlns="http://namespaces.zope.org/zope"
+   i18n_domain="z3ext.layoutform">
+
+  <!-- buttons -->
+  <adapter 
+     provides="z3c.form.interfaces.IButtonAction"
+     factory=".buttons.ButtonAction" />
+
+  <class class=".buttons.ButtonAction">
+    <allow attributes="render" />
+  </class>
+
+  <adapter 
+     provides="z3c.form.interfaces.IButtonAction"
+     factory=".buttons.AddButtonAction" />
+
+  <class class=".buttons.AddButtonAction">
+    <allow attributes="render" />
+  </class>
+
+  <adapter 
+     provides="z3c.form.interfaces.IButtonAction"
+     factory=".buttons.SaveButtonAction" />
+
+  <class class=".buttons.SaveButtonAction">
+    <allow attributes="render" />
+  </class>
+
+  <adapter 
+     provides="z3c.form.interfaces.IButtonAction"
+     factory=".buttons.CancelButtonAction" />
+
+  <class class=".buttons.CancelButtonAction">
+    <allow attributes="render" />
+  </class>
+
+</configure>

Modified: z3ext.layoutform/trunk/src/z3ext/layoutform/browser/configure.zcml
===================================================================
--- z3ext.layoutform/trunk/src/z3ext/layoutform/browser/configure.zcml	2009-01-17 16:52:50 UTC (rev 94803)
+++ z3ext.layoutform/trunk/src/z3ext/layoutform/browser/configure.zcml	2009-01-17 17:12:08 UTC (rev 94804)
@@ -2,23 +2,8 @@
    xmlns="http://namespaces.zope.org/zope"
    xmlns:z3ext="http://namespaces.zope.org/z3ext">
 
-  <!-- buttons -->
-  <adapter 
-     provides="z3c.form.interfaces.IButtonAction"
-     factory=".buttons.ButtonAction" />
+  <include file="buttons.zcml" />
 
-  <adapter 
-     provides="z3c.form.interfaces.IButtonAction"
-     factory=".buttons.AddButtonAction" />
-
-  <adapter 
-     provides="z3c.form.interfaces.IButtonAction"
-     factory=".buttons.SaveButtonAction" />
-
-  <adapter 
-     provides="z3c.form.interfaces.IButtonAction"
-     factory=".buttons.CancelButtonAction" />
-
   <!-- TextArea widget -->
   <class class=".textarea.TextAreaWidget">
     <require
@@ -85,10 +70,11 @@
      interface="z3ext.layoutform.browser.interfaces.IForm" />
 
   <z3ext:pagelet
+     type="form.view"
      for="..interfaces.IPageletForm"
      template="formview.pt"
-     layer="..interfaces.ILayoutFormLayer"
-     type="form.view" />
+     class=".formview.FormView"
+     layer="..interfaces.ILayoutFormLayer" />
 
   <!-- viewspace view -->
   <z3ext:pageletType

Modified: z3ext.layoutform/trunk/src/z3ext/layoutform/browser/formview.pt
===================================================================
--- z3ext.layoutform/trunk/src/z3ext/layoutform/browser/formview.pt	2009-01-17 16:52:50 UTC (rev 94803)
+++ z3ext.layoutform/trunk/src/z3ext/layoutform/browser/formview.pt	2009-01-17 17:12:08 UTC (rev 94804)
@@ -1,4 +1,5 @@
 <form action="." method="post" enctype="multipart/form-data" 
+      tal:omit-tag="view/isWrapped"
       tal:attributes="method context/method;
 		      enctype context/enctype;
 		      acceptCharset context/acceptCharset;

Added: z3ext.layoutform/trunk/src/z3ext/layoutform/browser/formview.py
===================================================================
--- z3ext.layoutform/trunk/src/z3ext/layoutform/browser/formview.py	                        (rev 0)
+++ z3ext.layoutform/trunk/src/z3ext/layoutform/browser/formview.py	2009-01-17 17:12:08 UTC (rev 94804)
@@ -0,0 +1,32 @@
+##############################################################################
+#
+# Copyright (c) 2009 Zope Corporation and Contributors.
+# All Rights Reserved.
+#
+# This software is subject to the provisions of the Zope Public License,
+# Version 2.1 (ZPL).  A copy of the ZPL should accompany this distribution.
+# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY AND ALL EXPRESS OR IMPLIED
+# WARRANTIES ARE DISCLAIMED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+# WARRANTIES OF TITLE, MERCHANTABILITY, AGAINST INFRINGEMENT, AND FITNESS
+# FOR A PARTICULAR PURPOSE.
+#
+##############################################################################
+""" 
+
+$Id:  2007-12-12 12:27:02Z fafhrd $
+"""
+from interfaces import IFormWrapper
+
+
+class FormView(object):
+
+    def isWrapped(self):
+        context = self.context.__parent__
+
+        while 1:
+            if IFormWrapper.providedBy(context):
+                return True
+
+            context = getattr(context, '__parent__', None)
+            if context is None:
+                return False

Modified: z3ext.layoutform/trunk/src/z3ext/layoutform/browser/interfaces.py
===================================================================
--- z3ext.layoutform/trunk/src/z3ext/layoutform/browser/interfaces.py	2009-01-17 16:52:50 UTC (rev 94803)
+++ z3ext.layoutform/trunk/src/z3ext/layoutform/browser/interfaces.py	2009-01-17 17:12:08 UTC (rev 94804)
@@ -40,3 +40,8 @@
 
 class IErrorView(interface.Interface):
     """ Error view snippet view """
+
+
+class IFormWrapper(interface.Interface):
+    """ """
+

Modified: z3ext.layoutform/trunk/src/z3ext/layoutform/configure.zcml
===================================================================
--- z3ext.layoutform/trunk/src/z3ext/layoutform/configure.zcml	2009-01-17 16:52:50 UTC (rev 94803)
+++ z3ext.layoutform/trunk/src/z3ext/layoutform/configure.zcml	2009-01-17 17:12:08 UTC (rev 94804)
@@ -25,4 +25,13 @@
   <!-- translations -->
   <i18n:registerTranslations directory="locales"/>
 
+  <!-- security declarations -->
+  <class class="z3c.form.button.ButtonAction">
+    <allow interface="z3c.form.interfaces.IWidget" />
+  </class>
+
+  <class class="z3c.form.button.ButtonActions">
+    <allow interface="z3c.form.interfaces.IActions" />
+  </class>
+
 </configure>