[Zope3-dev] Permission granularity/permission groups

[Chris Withers]

Jim Fulton wrote:

>> supposedly being the case in Zope 2, but hey, everything subclasses 
>> SimpleItem, and SimpleItem says "all your base are belong to us" ;-)
> 
> I've never seen a claim that Zope 2 was "deny by default".

 From 
http://www.zope.org/Documentation/How-To/ProductAuthorUpdateGuide/index_html:

"The new Zope security policy in 2.2 by default denies access to objects 
that are not explicitly protected."

>> - can you protect both simple attributes, objects-as-attribues and 
>> methods now?
> 
> Yes, *and* that will be the case in Zope 2.8 as well.

Cool :-)

Chris

-- 
Simplistix - Content Management, Zope & Python Consulting
            - http://www.simplistix.co.uk