/usr/share/pyshared/schooltool/contact/security.zcml is in python-schooltool 1:2.1.0-0ubuntu1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 | <?xml version="1.0"?>
<configure xmlns="http://schooltool.org/securitypolicy"
xmlns:zope="http://namespaces.zope.org/zope"
i18n_domain="schooltool">
<allow
interface="schooltool.contact.interfaces.IContactContainer"
crowds="administration"
permission="schooltool.view" />
<crowd
name="contact_person_instructors"
factory="schooltool.contact.contact.ContactPersonInstructorsCrowd" />
<allow
interface="schooltool.contact.interfaces.IContact"
crowds="administration contact_person_instructors"
permission="schooltool.view" />
<allow
interface="schooltool.contact.basicperson.IBoundContact"
crowds="administration owner person_instructors contact_person_instructors"
permission="schooltool.view" />
<!-- Security descriptions -->
<describe_group name="schooltool.contact" klass=".contact.ContactGroup" />
<describe_action
group="schooltool.contact" name="list" title="List/Search"
order="10"
interface="schooltool.contact.interfaces.IContactContainer"
permission="schooltool.view"
/>
<describe_action
group="schooltool.contact" name="manage_contacts"
title="Manage user's contacts"
description="Assign / remove contacts of a user,
define user's relationship with a contact."
order="20"
interface="schooltool.person.interfaces.IPerson"
permission="schooltool.edit"
/>
<describe_action
group="schooltool.contact" name="create_delete"
title="Create/Delete an external contact"
order="30"
interface="schooltool.app.interfaces.ISchoolToolApplication"
permission="schooltool.edit"
/>
<describe_action
group="schooltool.contact" name="view"
title="View an external contact"
order="40"
interface="schooltool.contact.interfaces.IContact"
permission="schooltool.view"
/>
<describe_action
group="schooltool.contact" name="modify"
title="Modify an external contact"
order="50"
interface="schooltool.app.interfaces.ISchoolToolApplication"
permission="schooltool.edit"
/>
<describe_action
group="schooltool.contact" name="view_bound"
title="View user's contact information"
order="60"
interface="schooltool.contact.basicperson.IBoundContact"
permission="schooltool.view"
/>
<describe_action
group="schooltool.contact" name="modify_bound"
title="Modify user's contact information"
order="70"
interface="schooltool.person.interfaces.IPerson"
permission="schooltool.edit"
/>
<describe_crowd
group="schooltool.contact"
action="view_bound"
crowd="owner"
title="User"
description="The user himself."
/>
</configure>
|