-
Book Overview & Buying
-
Table Of Contents
Plone 3 Products Development Cookbook
The following excerpt is taken from AccessControl.txt located in Zope's AccessControl package (zope2/lib/python/AccessControl):
A "permission" is the smallest unit of access to an object, roughly equivalent to the atomic permissions seen in [Windows] NT: R (Read), W (Write), X (Execute), etc. In Principia [former name for Zope], a permission usually describes a fine-grained logical operation on an object, such as "View Management Screens", "Add Properties", etc.
Different types of objects will define different permissions as appropriate for the object.
When users try to perform restricted actions in Zope, its security machinery will check first if they have the right authorization by testing the operation's restrictions against the user's permissions.
However, in Zope, permissions are never assigned directly to users, but to roles. Thus, if we want to give users the freedom to access restricted operations, roles must be assigned to them, or even better, to the groups to which users...
Change the font size
Change margin width
Change background colour