[Zope3-dev] Permission granularity/permission groups

[Chris Withers]

Hi Jim,

I think this is related to this thread, but I don't have enough detail 
to knoiw at what level.

One thing I'm really keen to see change is a problem I often bump into 
in Zope 2, CMF in particular.

A product author says a method/attribute should be protected by 
"Permission X", but also decides that 3 or 4 other methods should be 
protected by that permission.

I want to only grant access to the first method to a role, but not the 
other 3 methods.

In Zope 2, all I can do is go in and patch the product code, which means 
I have to maintain a patched version of the component I want to use.

Does Zope 3 offer a way to override the component author's security 
declarations without patching the component itself?

Is that related to anything Garret was asking about?

cheers,

Chris

-- 
Simplistix - Content Management, Zope & Python Consulting
            - http://www.simplistix.co.uk