Attachment 'autoadmin.py-1.8+1.9.patch'
Download 1 --- autoadmin.py.old 2009-01-07 01:26:52.000000000 +0100
2 +++ autoadmin.py 2009-03-25 01:34:56.000000000 +0100
3 @@ -66,6 +66,24 @@
4 class SecurityPolicy(Permissions):
5 """ Extend the default security policy with autoadmin feature """
6
7 + def write(self, pagename):
8 + try:
9 + request = self.request
10 + has_member = request.dicts.has_member
11 + username = request.user.name
12 + pagename = request.page.page_name
13 + mainpage = pagename.split('/')[0]
14 + if username == mainpage and (has_member('AutoAdminGroup', username) or \
15 + has_member('AutoAdminGroup', 'Known') or has_member('AutoAdminGroup', 'Trusted')):
16 + return True
17 + groupname = "%s/AdminGroup" % mainpage
18 + if (has_member(groupname, username) or has_member(groupname, 'Known') or \
19 + has_member(groupname, 'Trusted')) and has_member('AutoAdminGroup', groupname):
20 + return True
21 + except AttributeError:
22 + pass # when we get called from xmlrpc, there is no request.page
23 + return Permissions.__getattr__(self, 'write')(pagename)
24 +
25 def admin(self, pagename):
26 try:
27 request = self.request
28 @@ -73,10 +91,12 @@
29 username = request.user.name
30 pagename = request.page.page_name
31 mainpage = pagename.split('/')[0]
32 - if username == mainpage and has_member('AutoAdminGroup', username):
33 + if username == mainpage and (has_member('AutoAdminGroup', username) or \
34 + has_member('AutoAdminGroup', 'Known') or has_member('AutoAdminGroup', 'Trusted')):
35 return True
36 groupname = "%s/AdminGroup" % mainpage
37 - if has_member(groupname, username) and has_member('AutoAdminGroup', groupname):
38 + if (has_member(groupname, username) or has_member(groupname, 'Known') or \
39 + has_member(groupname, 'Trusted')) and has_member('AutoAdminGroup', groupname):
40 return True
41 except AttributeError:
42 pass # when we get called from xmlrpc, there is no request.page
Attached Files
To refer to attachments on a page, use attachment:filename, as shown below in the list of files. Do NOT use the URL of the [get] link, since this is subject to change and can break easily.You are not allowed to attach a file to this page.