/usr/share/pyshared/schooltool/app/security.zcml is in python-schooltool 1:2.1.0-0ubuntu1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 | <?xml version="1.0"?>
<configure xmlns="http://schooltool.org/securitypolicy"
xmlns:zope="http://namespaces.zope.org/zope">
<describe_crowd
crowd_factory="schooltool.securitypolicy.crowds._GroupCrowd"
factory=".security.GroupCrowdDescription" />
<describe_crowd
crowd_factory="schooltool.securitypolicy.crowds.ManagersCrowd"
factory=".security.ManagersCrowdDescription" />
<crowd
name="leaders"
factory=".security.LeaderCrowd" />
<crowd
name="group_members"
factory=".membership.GroupMemberCrowd" />
<allow
interface="schooltool.group.interfaces.IGroup"
permission="schooltool.view"
crowds="group_members" />
<allow
interface="schooltool.app.interfaces.ISchoolToolApplication"
crowds="everybody"
permission="schooltool.view" />
<allow
interface="schooltool.app.interfaces.ISchoolToolApplication"
crowds="administration"
permission="schooltool.edit" />
<allow
interface="schooltool.app.interfaces.ISchoolToolApplication"
crowds="administration"
permission="zope.ManageSite" />
<zope:configure
xmlns:zcml="http://namespaces.zope.org/zcml"
zcml:condition="have apidoc">
<allow
interface="schooltool.app.interfaces.ISchoolToolApplication"
crowds="administration"
permission="zope.app.apidoc.UseAPIDoc" />
</zope:configure>
<!-- Security declarations for calendaring -->
<crowd
name="calendar_viewers"
factory=".security.CalendarViewersCrowd" />
<crowd
name="calendar_editors"
factory=".security.CalendarEditorsCrowd" />
<allow
interface=".interfaces.ISchoolToolCalendar"
permission="schooltool.view"
crowds="administration calendar_viewers" />
<allow
interface=".interfaces.ISchoolToolCalendar"
permission="schooltool.edit"
crowds="administration owner calendar_editors" />
<!-- Security descriptions -->
<describe_group name="schooltool.app"
title="SchoolTool application" />
<describe_action
group="schooltool.app" name="view" title="Access"
order="10"
interface="schooltool.app.interfaces.ISchoolToolApplication"
permission="schooltool.view"
/>
<describe_action
group="schooltool.app" name="modify"
title="Manage school settings and configuration"
order="20"
interface="schooltool.app.interfaces.ISchoolToolApplication"
permission="schooltool.edit"
/>
<describe_action
group="schooltool.app" name="view_calendar"
title="View calendar"
order="50"
interface="schooltool.app.interfaces.ISchoolToolCalendar"
permission="schooltool.view"
/>
<describe_action
group="schooltool.app" name="change_calendar"
title="Change calendar"
order="60"
interface="schooltool.app.interfaces.ISchoolToolCalendar"
permission="schooltool.edit"
/>
<!-- Parent crowds -->
<zope:adapter
factory="schooltool.securitypolicy.crowds.EverybodyCrowd"
for="schooltool.app.interfaces.ISchoolToolApplication"
provides=".security.ICalendarParentCrowd"
name="schooltool.view" />
<switch_description
group="schooltool.app"
crowd_factory="schooltool.app.security.CalendarViewersCrowd"
use_crowd_factory="schooltool.securitypolicy.crowds.EverybodyCrowd"
/>
</configure>
|