/usr/share/pyshared/schooltool/resource/security.zcml is in python-schooltool 1:2.1.0-0ubuntu1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 | <?xml version="1.0"?>
<configure xmlns="http://schooltool.org/securitypolicy"
xmlns:zope="http://namespaces.zope.org/zope">
<!-- security -->
<setting
key="everyone_can_view_resource_list"
text="The list of resources in the system is visible to the general public."
alt_text="Only school administration can view the list of resources."
default="False" />
<setting
key="everyone_can_view_resource_info"
text="Information about each resource is visible to the general public."
alt_text="Information about each resource is visible to school administration and responsible parties of the resource."
default="False" />
<setting
key="everyone_can_view_resource_calendar"
text="Resource calendars are visible to the general public."
alt_text="Resource calendars are visible to school administration, teachers, and responsible parties of the resource."
default="False" />
<crowd
name="resource_viewers"
factory=".resource.ResourceViewersCrowd" />
<crowd
name="resource_list_viewers"
factory=".resource.ResourceContainerViewersCrowd" />
<allow
interface="schooltool.resource.interfaces.IResourceContainer"
crowds="administration resource_list_viewers"
permission="schooltool.view" />
<allow
interface="schooltool.resource.interfaces.IResourceContainer"
crowds="administration"
permission="schooltool.edit" />
<allow
interface="schooltool.resource.interfaces.IBaseResource"
crowds="administration leaders resource_viewers"
permission="schooltool.view" />
<allow
interface="schooltool.resource.interfaces.IBaseResource"
crowds="administration leaders"
permission="schooltool.edit" />
<!-- Security descriptions -->
<describe_group name="schooltool.resource"
title="Reservations"
description="Resources are locations or objects within a school.
SchoolTool's calendar can function as a reservation
and tracking system for resources."
/>
<describe_action
group="schooltool.resource" name="list" title="List/Search resources"
order="10"
interface="schooltool.resource.interfaces.IResourceContainer"
permission="schooltool.view"
/>
<describe_action
group="schooltool.resource" name="add_remove" title="Add/Remove resources"
order="20"
interface="schooltool.resource.interfaces.IResourceContainer"
permission="schooltool.edit"
/>
<describe_action
group="schooltool.resource" name="view" title="View a resource"
order="30"
interface="schooltool.resource.interfaces.IBaseResource"
permission="schooltool.view"
/>
<describe_action
group="schooltool.resource" name="modify" title="Modify a resource"
order="40"
interface="schooltool.resource.interfaces.IBaseResource"
permission="schooltool.edit"
/>
<describe_action
group="schooltool.resource" name="view_calendar"
title="View reservation calendar"
order="50"
interface="schooltool.app.interfaces.ISchoolToolCalendar"
permission="schooltool.view"
/>
<describe_action
group="schooltool.resource" name="change_calendar"
title="Schedule reservation via calendar"
order="60"
interface="schooltool.app.interfaces.ISchoolToolCalendar"
permission="schooltool.edit"
/>
<!-- Parent crowds -->
<zope:adapter
factory=".resource.ResourceCalendarViewersCrowd"
provides="schooltool.app.security.ICalendarParentCrowd"
name="schooltool.view" />
<zope:adapter
factory=".resource.ResourceCalendarEditorsCrowd"
provides="schooltool.app.security.ICalendarParentCrowd"
name="schooltool.edit" />
<switch_description
group="schooltool.resource"
crowd_factory="schooltool.app.security.CalendarViewersCrowd"
use_crowd_factory=".resource.ResourceCalendarViewersCrowd"
/>
<switch_description
group="schooltool.resource"
crowd_factory="schooltool.app.security.CalendarEditorsCrowd"
use_crowd_factory=".resource.ResourceCalendarEditorsCrowd"
/>
</configure>
|