############################################################################## # # Copyright (c) 2002 Zope Corporation and Contributors. All Rights Reserved. # # This software is subject to the provisions of the Zope Public License, # Version 2.1 (ZPL). A copy of the ZPL should accompany this distribution. # THIS SOFTWARE IS PROVIDED "AS IS" AND ANY AND ALL EXPRESS OR IMPLIED # WARRANTIES ARE DISCLAIMED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED # WARRANTIES OF TITLE, MERCHANTABILITY, AGAINST INFRINGEMENT, AND FITNESS # FOR A PARTICULAR PURPOSE # ############################################################################## """Permission Mapping Sometimes, we need an object's permissions to be remapped to other permissions when the object is used in specual ways. This is rather hard, since we need the object's ordinary permissions intact so we can manage it. $Id: PermissionMapping.py 40218 2005-11-18 14:39:19Z andreasjung $ """ from cgi import escape import ExtensionClass, Acquisition from Globals import InitializeClass from zope.interface import implements from interfaces import IPermissionMappingSupport from Owned import UnownableOwner from Permission import pname class RoleManager: implements(IPermissionMappingSupport) def manage_getPermissionMapping(self): """Return the permission mapping for the object This is a list of dictionaries with: permission_name -- The name of the native object permission class_permission -- The class permission the permission is mapped to. """ wrapper=getattr(self, '_permissionMapper', None) if wrapper is None: wrapper=PM() perms={} for p in self.possible_permissions(): perms[pname(p)]=p r=[] a=r.append for ac_perms in self.ac_inherited_permissions(1): p=perms.get(getPermissionMapping(ac_perms[0], wrapper), '') a({'permission_name': ac_perms[0], 'class_permission': p}) return r def manage_setPermissionMapping(self, permission_names=[], class_permissions=[], REQUEST=None): """Change the permission mapping """ wrapper=getattr(self, '_permissionMapper', None) if wrapper is None: wrapper=PM() perms=self.possible_permissions() for i in range(len(permission_names)): name=permission_names[i] p=class_permissions[i] if p and (p not in perms): __traceback_info__=perms, p, i raise ValueError, ( """Attempted to map a permission to a permission, %s, that is not valid. This should never happen. (Waaa). """ % escape(p)) setPermissionMapping(name, wrapper, p) self._permissionMapper=wrapper if REQUEST is not None: return self.manage_access( REQUEST, manage_tabs_message='The permission mapping has been updated') def _isBeingUsedAsAMethod(self, REQUEST =None, wannaBe=0): try: if hasattr(self, 'aq_self'): r=self.aq_acquire('_isBeingUsedAsAMethod_') else: r=self._isBeingUsedAsAMethod_ except: r=0 if REQUEST is not None: if not r != (not wannaBe): REQUEST.response.notFoundError() return r def _isBeingAccessedAsZClassDefinedInstanceMethod(self): p=getattr(self,'aq_parent',None) if p is None: return 0 # Not wrapped base=getattr(p, 'aq_base', None) return type(base) is PermissionMapper InitializeClass(RoleManager) def getPermissionMapping(name, obj, st=type('')): obj=getattr(obj, 'aq_base', obj) name=pname(name) r=getattr(obj, name, '') if type(r) is not st: r='' return r def setPermissionMapping(name, obj, v): name=pname(name) if v: setattr(obj, name, pname(v)) elif obj.__dict__.has_key(name): delattr(obj, name) class PM(ExtensionClass.Base): _owner=UnownableOwner _View_Permission='_View_Permission' _is_wrapperish = 1 def __getattr__(self, name): # We want to make sure that any non-explicitly set methods are # private! if name.startswith('_') and name.endswith("_Permission"): return '' raise AttributeError, escape(name) PermissionMapper=PM def aqwrap(object, wrapper, parent): r=Rewrapper() r._ugh=wrapper, object, parent return r class Rewrapper(ExtensionClass.Base): def __of__(self, parent): w, m, p = self._ugh return m.__of__( Acquisition.ImplicitAcquisitionWrapper( w, parent)) def __getattr__(self, name): w, m, parent = self._ugh self=m.__of__( Acquisition.ImplicitAcquisitionWrapper( w, parent)) return getattr(self, name) def __call__(self, *args, **kw): w, m, parent = self._ugh self=m.__of__( Acquisition.ImplicitAcquisitionWrapper( w, parent)) return apply(self, args, kw)