[Checkins] SVN: z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/ missing security declarations. Just 1 failure remaining

Christophe Combelles ccomb at free.fr
Sat Apr 24 12:34:30 EDT 2010


Log message for revision 111366:
  missing security declarations. Just 1 failure remaining
  

Changed:
  U   z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/addressbook/README.txt
  U   z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/addressbook/configure.zcml
  U   z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/application.zcml
  U   z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/spreadsheet/configure.zcml
  U   z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/widgets/configure.zcml

-=-
Modified: z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/addressbook/README.txt
===================================================================
--- z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/addressbook/README.txt	2010-04-24 15:09:56 UTC (rev 111365)
+++ z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/addressbook/README.txt	2010-04-24 16:34:30 UTC (rev 111366)
@@ -17,8 +17,6 @@
 Since all demos are purely public, there is no need to log in. Let's now click
 on the "Address Book" link:
 
-  >>> user.handleErrors = False
-
   >>> user.getLink('Address Book').click()
 
 There is only one screen for this demo. In it you see the table of all
@@ -102,6 +100,9 @@
 
 By clicking on the name, the edit form for Stephan is shown:
 
+  >>> user.handleErrors = False
+  >>> print user.contents
+
   >>> user.getLink('Richter').click()
 
 Note that the row is highlighted now:

Modified: z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/addressbook/configure.zcml
===================================================================
--- z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/addressbook/configure.zcml	2010-04-24 15:09:56 UTC (rev 111365)
+++ z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/addressbook/configure.zcml	2010-04-24 16:34:30 UTC (rev 111366)
@@ -6,12 +6,26 @@
 
   <!-- Content Security Declarations -->
 
+  <class class="zope.app.container.btree.BTreeContainer">
+    <require permission="zope.Public"
+             interface="zope.app.container.interfaces.IContainer" />
+    <require permission="zope.Public"
+             set_schema="zope.app.container.interfaces.IContainer" />
+  </class>
+
   <class class=".contact.Address">
     <allow interface=".interfaces.IAddress" />
     <require permission="zope.Public"
              set_schema=".interfaces.IAddress" />
   </class>
 
+  <class class=".contact.EMails">
+    <require permission="zope.Public"
+             interface="zope.app.container.interfaces.IContainer" />
+    <require permission="zope.Public"
+             set_schema="zope.app.container.interfaces.IContainer" />
+  </class>
+
   <class class=".contact.EMail">
     <allow interface=".interfaces.IEMail" />
     <require permission="zope.Public"

Modified: z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/application.zcml
===================================================================
--- z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/application.zcml	2010-04-24 15:09:56 UTC (rev 111365)
+++ z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/application.zcml	2010-04-24 16:34:30 UTC (rev 111366)
@@ -64,9 +64,10 @@
   <grantAll role="zope.Anonymous" />
 
   <class class="zope.app.folder.folder.Folder">
+  <implements interface="zope.annotation.interfaces.IAttributeAnnotatable" />
     <require permission="zope.Public"
-             interface="zope.app.container.interfaces.IReadContainer" />
+             interface="zope.app.folder.interfaces.IFolder" />
     <require permission="zope.Public"
-             interface="zope.app.container.interfaces.IWriteContainer" />
+             set_schema="zope.app.folder.interfaces.IFolder" />
     </class>
 </configure>

Modified: z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/spreadsheet/configure.zcml
===================================================================
--- z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/spreadsheet/configure.zcml	2010-04-24 15:09:56 UTC (rev 111365)
+++ z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/spreadsheet/configure.zcml	2010-04-24 16:34:30 UTC (rev 111366)
@@ -1,8 +1,17 @@
 <configure
     xmlns="http://namespaces.zope.org/browser"
+    xmlns:zope="http://namespaces.zope.org/zope"
     xmlns:z3c="http://namespaces.zope.org/z3c"
     i18n_domain="z3c.formdemo">
 
+  <!-- security declaration -->
+  <zope:class class=".content.Candidate">
+    <zope:require permission="zope.Public"
+             interface=".content.ICandidate" />
+    <zope:require permission="zope.Public"
+             set_schema=".content.ICandidate" />
+  </zope:class>
+
   <!-- Resources -->
 
   <resourceDirectory

Modified: z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/widgets/configure.zcml
===================================================================
--- z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/widgets/configure.zcml	2010-04-24 15:09:56 UTC (rev 111365)
+++ z3c.formdemo/branches/adamg-1.5.4/src/z3c/formdemo/widgets/configure.zcml	2010-04-24 16:34:30 UTC (rev 111366)
@@ -4,6 +4,13 @@
     xmlns:z3c="http://namespaces.zope.org/z3c"
     i18n_domain="z3c.formdemo">
 
+<class class=".browser.AllFields">
+    <require permission="zope.Public"
+             interface=".interfaces.IAllFields" />
+    <require permission="zope.Public"
+             set_schema=".interfaces.IAllFields" />
+</class>
+
   <browser:resource
       name="pressme.png"
       file="pressme.png"
@@ -20,6 +27,7 @@
 
   <adapter
       factory=".browser.getAllFields"
+      trusted="yes"
       />
 
 </configure>



More information about the checkins mailing list