Re: [Zope-PAS] role management

2006-01-21 Thread Jens Vagelpohl
On 21 Jan 2006, at 15:37, Wichert Akkerman wrote: Previously Jens Vagelpohl wrote: Roles are "global". User objects get them assigned upon creation. Upon creation of what? The user object. If ZODBRoleManager does not "see" global roles added after its instantiation then that's a bug.

Re: [Zope-PAS] role management

2006-01-21 Thread Wichert Akkerman
Previously Jens Vagelpohl wrote: > Roles are "global". User objects get them assigned upon creation. Upon creation of what? > Local roles are only used within the context they are defined in. So > if user "A" has role "Member" after authenticating at the root in / > acl_users, and he has a l

Re: [Zope-PAS] role management

2006-01-19 Thread Tino Wildenhain
Jens Vagelpohl schrieb: > > On 19 Jan 2006, at 21:48, Wichert Akkerman wrote: > >> I notice that PAS is missing an interface which specifies how to add >> a role. Is that a conscious decision? > > > Zope user folders don't manage roles, containers do. Or basically any > RoleManager (see Access

Re: [Zope-PAS] role management

2006-01-19 Thread Jens Vagelpohl
On 19 Jan 2006, at 22:55, Wichert Akkerman wrote: Currently adding roles through a RoleManager breaks ZODBRoleManager: it reads a list of all roles when it created and assumes they do not change after that. If you add a new role you can do that through a RoleManager directly, but ZODBRoleManager

Re: [Zope-PAS] role management

2006-01-19 Thread Wichert Akkerman
Previously Jens Vagelpohl wrote: > Zope user folders don't manage roles, containers do. Or basically any > RoleManager (see AccessControl/Role.py if I remember correctly). I am having some difficulty in understanding the logic here, or possibly I am too tainted by my use of Plone. My current un

Re: [Zope-PAS] role management

2006-01-19 Thread Jens Vagelpohl
On 19 Jan 2006, at 21:48, Wichert Akkerman wrote: I notice that PAS is missing an interface which specifies how to add a role. Is that a conscious decision? Zope user folders don't manage roles, containers do. Or basically any RoleManager (see AccessControl/Role.py if I remember correctly).