Changeset 7173 for main/waeup.sirp

Timestamp:

22 Nov 2011, 20:27:49 (13 years ago)

Author:

Henrik Bettermann

Message:

Automatically set global PortalUser? role when user account is created. Thus all users get view permissions for the academic section.

Location:

main/waeup.sirp/trunk/src/waeup/sirp

Files:

• authentication.py (modified) (1 diff)
• authentication.txt (modified) (2 diffs)

main/waeup.sirp/trunk/src/waeup/sirp/authentication.py

@@ -216 +216 @@
 def handle_account_added(account, event):
     """When an account is added, the local owner role and the global
-    PortalUser rolemust be set.
-    """
-    # First we have to set the local owner role of the account object
-    role_manager = IPrincipalRoleManager(account)
-    role_manager.assignRoleToPrincipal(
+    PortalUser role must be set.
+    """
+    # We set the local Owner role
+    role_manager_account = IPrincipalRoleManager(account)
+    role_manager_account.assignRoleToPrincipal(
         'waeup.local.Owner', account.name)
-    # Then we have to notify the user account that the local role
+    # We set the global PortalUser role
+    site = grok.getSite()
+    role_manager_site = IPrincipalRoleManager(site)
+    role_manager_site.assignRoleToPrincipal(
+        'waeup.PortalUser', account.name)
+    # Finally we have to notify the user account that the local role
     # of the same object has changed
     notify(LocalRoleSetEvent(

main/waeup.sirp/trunk/src/waeup/sirp/authentication.txt

@@ -40 +40 @@
   >>> root['app']['users'].addAccount(alice)
 
-See ``users.txt`` for details about the UsersContainer we use here.
+See ``userscontainer.txt`` for details about the UsersContainer we use here.
 
 Users and local roles
@@ -46 +46 @@
 
 Accounts also hold infos about local roles assigned to a user. In the
-beginning, users have only the local owner role of their own account object:
+beginning, users have the local owner role of their own account object:
 
   >>> alice.getLocalRoles()
   {'waeup.local.Owner': [<waeup.sirp.authentication.Account object at 0x...>]}
+
+Users have also got the global PortalUser role:
+
+  >>> alice.getRoles()
+  ['waeup.PortalUser']
 
 We can tell an account, that Alice got some role for another object: