/usr/share/pyshared/schooltool/group/security.zcml is in python-schooltool 1:2.1.0-0ubuntu1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 | <?xml version="1.0"?>
<configure xmlns="http://schooltool.org/securitypolicy"
xmlns:zope="http://namespaces.zope.org/zope">
<setting
key="everyone_can_view_group_list"
text="The list of groups in the system is visible to the general public."
alt_text="Only school administration can view the list of groups."
default="False" />
<setting
key="everyone_can_view_group_info"
text="Information about each group is visible to the general public."
alt_text="Information about each group is visible to school administration, and members and responsible parties of the group."
default="False" />
<setting
key="everyone_can_view_group_calendar"
text="Each group calendar is visible to the general public."
alt_text="Each group calendar is visible to school administration, and members and responsible parties of the group."
default="False" />
<setting
key="members_can_edit_group_calendar"
text="All members of a group and school administration can edit its calendar."
alt_text="The responsible parties of a group and school administration can edit its calendar."
default="False" />
<crowd
name="group_viewers"
factory=".group.GroupViewersCrowd" />
<crowd
name="group_list_viewers"
factory=".group.GroupContainerViewersCrowd" />
<allow
interface="schooltool.group.interfaces.IGroupContainer"
crowds="administration group_list_viewers"
permission="schooltool.view" />
<allow
interface="schooltool.group.interfaces.IGroupContainer"
crowds="administration"
permission="schooltool.edit" />
<allow
interface="schooltool.group.interfaces.IGroup"
crowds="administration leaders group_viewers"
permission="schooltool.view" />
<allow
interface="schooltool.group.interfaces.IGroup"
crowds="administration leaders"
permission="schooltool.edit" />
<!-- Security descriptions -->
<describe_group name="schooltool.group"
title="Groups"
description="Groups are essentially sets of users."
/>
<describe_action
group="schooltool.group" name="list" title="List"
order="10"
interface="schooltool.group.interfaces.IGroupContainer"
permission="schooltool.view"
/>
<describe_action
group="schooltool.group" name="create_delete" title="Create/Delete"
order="20"
interface="schooltool.group.interfaces.IGroupContainer"
permission="schooltool.edit"
/>
<describe_action
group="schooltool.group" name="view" title="View"
order="30"
interface="schooltool.group.interfaces.IGroup"
permission="schooltool.view"
/>
<describe_action
group="schooltool.group" name="modify" title="Modify"
order="40"
interface="schooltool.group.interfaces.IGroup"
permission="schooltool.edit"
/>
<describe_action
group="schooltool.group" name="view_calendar"
title="View calendar"
order="50"
interface="schooltool.app.interfaces.ISchoolToolCalendar"
permission="schooltool.view"
/>
<describe_action
group="schooltool.group" name="change_calendar"
title="Change calendar"
order="60"
interface="schooltool.app.interfaces.ISchoolToolCalendar"
permission="schooltool.edit"
/>
<!-- Parent crowds -->
<zope:adapter
factory=".group.GroupCalendarViewersCrowd"
provides="schooltool.app.interfaces.ICalendarParentCrowd"
name="schooltool.view" />
<zope:adapter
factory=".group.GroupCalendarEditorsCrowd"
provides="schooltool.app.interfaces.ICalendarParentCrowd"
name="schooltool.edit" />
<switch_description
group="schooltool.group"
crowd_factory="schooltool.app.security.CalendarViewersCrowd"
use_crowd_factory=".group.GroupCalendarViewersCrowd"
/>
<switch_description
group="schooltool.group"
crowd_factory="schooltool.app.security.CalendarEditorsCrowd"
use_crowd_factory=".group.GroupCalendarEditorsCrowd"
/>
<describe_crowd
crowd_factory=".group.GroupCalendarEditorsCrowd"
factory=".group.GroupCalendarEditorsCrowdDescription"
/>
</configure>
|