Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
S
slapos.core
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Analytics
Analytics
CI / CD
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
Ivan Tyagov
slapos.core
Commits
4cfc61f1
Commit
4cfc61f1
authored
Jul 30, 2014
by
Rafael Monnerat
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
slapos_erp5: Update security for ERP5
parent
db8abee2
Changes
12
Show whitespace changes
Inline
Side-by-side
Showing
12 changed files
with
107 additions
and
3 deletions
+107
-3
master/bt5/slapos_erp5/LocalRolesTemplateItem/upgrade_decision_module.xml
...s_erp5/LocalRolesTemplateItem/upgrade_decision_module.xml
+15
-0
master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Restricted%20Access%20Token.xml
...rtalTypeRolesTemplateItem/Restricted%20Access%20Token.xml
+7
-0
master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Upgrade%20Decision%20Module.xml
...rtalTypeRolesTemplateItem/Upgrade%20Decision%20Module.xml
+12
-0
master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Upgrade%20Decision.xml
...s_erp5/PortalTypeRolesTemplateItem/Upgrade%20Decision.xml
+13
-0
master/bt5/slapos_erp5/PortalTypeWorkflowChainTemplateItem/workflow_chain_type.xml
...rtalTypeWorkflowChainTemplateItem/workflow_chain_type.xml
+4
-0
master/bt5/slapos_erp5/TestTemplateItem/testSlapOSERP5GroupRoleSecurity.py
..._erp5/TestTemplateItem/testSlapOSERP5GroupRoleSecurity.py
+44
-0
master/bt5/slapos_erp5/bt/revision
master/bt5/slapos_erp5/bt/revision
+1
-1
master/bt5/slapos_erp5/bt/template_local_role_list
master/bt5/slapos_erp5/bt/template_local_role_list
+1
-0
master/bt5/slapos_erp5/bt/template_local_roles_list
master/bt5/slapos_erp5/bt/template_local_roles_list
+2
-1
master/bt5/slapos_erp5/bt/template_portal_type_role_list
master/bt5/slapos_erp5/bt/template_portal_type_role_list
+3
-0
master/bt5/slapos_erp5/bt/template_portal_type_roles_list
master/bt5/slapos_erp5/bt/template_portal_type_roles_list
+3
-0
master/bt5/slapos_erp5/bt/template_portal_type_workflow_chain_list
...5/slapos_erp5/bt/template_portal_type_workflow_chain_list
+2
-1
No files found.
master/bt5/slapos_erp5/LocalRolesTemplateItem/upgrade_decision_module.xml
0 → 100644
View file @
4cfc61f1
<local_roles_item>
<local_roles>
<role
id=
'G-COMPANY'
>
<item>
Auditor
</item>
<item>
Author
</item>
</role>
<role
id=
'R-MEMBER'
>
<item>
Auditor
</item>
<item>
Author
</item>
</role>
<role
id=
'zope'
>
<item>
Owner
</item>
</role>
</local_roles>
</local_roles_item>
\ No newline at end of file
master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Restricted%20Access%20Token.xml
0 → 100644
View file @
4cfc61f1
<type_roles>
<role
id=
'Assignor'
>
<property
id=
'title'
>
Group company
</property>
<multi_property
id=
'category'
>
group/company
</multi_property>
<multi_property
id=
'base_category'
>
group
</multi_property>
</role>
</type_roles>
\ No newline at end of file
master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Upgrade%20Decision%20Module.xml
0 → 100644
View file @
4cfc61f1
<type_roles>
<role
id=
'Author; Auditor'
>
<property
id=
'title'
>
Group company
</property>
<multi_property
id=
'category'
>
group/company
</multi_property>
<multi_property
id=
'base_category'
>
group
</multi_property>
</role>
<role
id=
'Auditor; Author'
>
<property
id=
'title'
>
Member
</property>
<multi_property
id=
'category'
>
role/member
</multi_property>
<multi_property
id=
'base_category'
>
role
</multi_property>
</role>
</type_roles>
\ No newline at end of file
master/bt5/slapos_erp5/PortalTypeRolesTemplateItem/Upgrade%20Decision.xml
0 → 100644
View file @
4cfc61f1
<type_roles>
<role
id=
'Assignor'
>
<property
id=
'title'
>
Group company
</property>
<multi_property
id=
'category'
>
group/company
</multi_property>
<multi_property
id=
'base_category'
>
group
</multi_property>
</role>
<role
id=
'Assignee'
>
<property
id=
'title'
>
User
</property>
<property
id=
'description'
>
Monovalued role
</property>
<property
id=
'base_category_script'
>
ERP5Type_getSecurityCategoryFromContent
</property>
<multi_property
id=
'base_category'
>
destination_decision
</multi_property>
</role>
</type_roles>
\ No newline at end of file
master/bt5/slapos_erp5/PortalTypeWorkflowChainTemplateItem/workflow_chain_type.xml
View file @
4cfc61f1
...
@@ -55,4 +55,8 @@
...
@@ -55,4 +55,8 @@
<type>
Software Instance
</type>
<type>
Software Instance
</type>
<workflow>
local_permission_slapos_interaction_workflow
</workflow>
<workflow>
local_permission_slapos_interaction_workflow
</workflow>
</chain>
</chain>
<chain>
<type>
Upgrade Decision
</type>
<workflow>
local_permission_slapos_interation_workflow
</workflow>
</chain>
</workflow_chain>
</workflow_chain>
\ No newline at end of file
master/bt5/slapos_erp5/TestTemplateItem/testSlapOSERP5GroupRoleSecurity.py
View file @
4cfc61f1
...
@@ -2002,6 +2002,16 @@ class TestOneTimeRestrictedAccessToken(TestSlapOSGroupRoleSecurityMixin):
...
@@ -2002,6 +2002,16 @@ class TestOneTimeRestrictedAccessToken(TestSlapOSGroupRoleSecurityMixin):
self
.
assertRoles
(
product
,
'G-COMPANY'
,
[
'Assignor'
])
self
.
assertRoles
(
product
,
'G-COMPANY'
,
[
'Assignor'
])
self
.
assertRoles
(
product
,
self
.
user_id
,
[
'Owner'
])
self
.
assertRoles
(
product
,
self
.
user_id
,
[
'Owner'
])
class
TestRestrictedAccessToken
(
TestSlapOSGroupRoleSecurityMixin
):
def
test_GroupCompany
(
self
):
product
=
self
.
portal
.
access_token_module
.
newContent
(
portal_type
=
'Restricted Access Token'
)
product
.
updateLocalRolesOnSecurityGroups
()
self
.
assertSecurityGroup
(
product
,
[
'G-COMPANY'
,
self
.
user_id
],
False
)
self
.
assertRoles
(
product
,
'G-COMPANY'
,
[
'Assignor'
])
self
.
assertRoles
(
product
,
self
.
user_id
,
[
'Owner'
])
class
TestConsumptionDocumentModule
(
TestSlapOSGroupRoleSecurityMixin
):
class
TestConsumptionDocumentModule
(
TestSlapOSGroupRoleSecurityMixin
):
def
test
(
self
):
def
test
(
self
):
module
=
self
.
portal
.
consumption_document_module
module
=
self
.
portal
.
consumption_document_module
...
@@ -2040,3 +2050,37 @@ class TestCloudContract(TestSlapOSGroupRoleSecurityMixin):
...
@@ -2040,3 +2050,37 @@ class TestCloudContract(TestSlapOSGroupRoleSecurityMixin):
False
)
False
)
self
.
assertRoles
(
text
,
'G-COMPANY'
,
[
'Assignor'
])
self
.
assertRoles
(
text
,
'G-COMPANY'
,
[
'Assignor'
])
self
.
assertRoles
(
text
,
self
.
user_id
,
[
'Owner'
])
self
.
assertRoles
(
text
,
self
.
user_id
,
[
'Owner'
])
class
TestUpgradeDecisionModule
(
TestSlapOSGroupRoleSecurityMixin
):
def
test
(
self
):
module
=
self
.
portal
.
upgrade_decision_module
self
.
assertSecurityGroup
(
module
,
[
'G-COMPANY'
,
'R-MEMBER'
,
'zope'
],
True
)
self
.
assertRoles
(
module
,
'G-COMPANY'
,
[
'Auditor'
,
'Author'
])
self
.
assertRoles
(
module
,
'R-MEMBER'
,
[
'Auditor'
,
'Author'
])
self
.
assertRoles
(
module
,
'zope'
,
[
'Owner'
])
class
TestUpgradeDecision
(
TestSlapOSGroupRoleSecurityMixin
):
def
test_GroupCompany
(
self
):
product
=
self
.
portal
.
upgrade_decision_module
.
newContent
(
portal_type
=
'Upgrade Decision'
)
product
.
updateLocalRolesOnSecurityGroups
()
self
.
assertSecurityGroup
(
product
,
[
'G-COMPANY'
,
self
.
user_id
],
False
)
self
.
assertRoles
(
product
,
'G-COMPANY'
,
[
'Assignor'
])
self
.
assertRoles
(
product
,
self
.
user_id
,
[
'Owner'
])
def
test_Customer
(
self
):
reference
=
'TESTPERSON-%s'
%
self
.
generateNewId
()
person
=
self
.
portal
.
person_module
.
newContent
(
portal_type
=
'Person'
,
reference
=
reference
)
product
=
self
.
portal
.
upgrade_decision_module
.
newContent
(
portal_type
=
'Upgrade Decision'
,
destination_decision_value
=
person
,
)
product
.
updateLocalRolesOnSecurityGroups
()
self
.
assertSecurityGroup
(
product
,
[
'G-COMPANY'
,
reference
,
self
.
user_id
],
False
)
self
.
assertRoles
(
product
,
'G-COMPANY'
,
[
'Assignor'
])
self
.
assertRoles
(
product
,
reference
,
[
'Assignee'
])
self
.
assertRoles
(
product
,
self
.
user_id
,
[
'Owner'
])
master/bt5/slapos_erp5/bt/revision
View file @
4cfc61f1
174
175
\ No newline at end of file
\ No newline at end of file
master/bt5/slapos_erp5/bt/template_local_role_list
View file @
4cfc61f1
...
@@ -70,4 +70,5 @@ support_request_module
...
@@ -70,4 +70,5 @@ support_request_module
support_request_module/slapos_crm_support_request_template
support_request_module/slapos_crm_support_request_template
system_event_module
system_event_module
transformation_module
transformation_module
upgrade_decision_module
web_page_module
web_page_module
\ No newline at end of file
master/bt5/slapos_erp5/bt/template_local_roles_list
View file @
4cfc61f1
...
@@ -57,11 +57,11 @@ sale_order_module
...
@@ -57,11 +57,11 @@ sale_order_module
sale_packing_list_module
sale_packing_list_module
sale_trade_condition_module
sale_trade_condition_module
service_module
service_module
service_module/slapos_account_validation
service_module/slapos_discount
service_module/slapos_discount
service_module/slapos_instance_subscription
service_module/slapos_instance_subscription
service_module/slapos_netdrive_consumption
service_module/slapos_netdrive_consumption
service_module/slapos_tax
service_module/slapos_tax
service_module/slapos_account_validation
software_installation_module
software_installation_module
software_instance_module
software_instance_module
software_product_module
software_product_module
...
@@ -70,4 +70,5 @@ support_request_module
...
@@ -70,4 +70,5 @@ support_request_module
support_request_module/slapos_crm_support_request_template
support_request_module/slapos_crm_support_request_template
system_event_module
system_event_module
transformation_module
transformation_module
upgrade_decision_module
web_page_module
web_page_module
\ No newline at end of file
master/bt5/slapos_erp5/bt/template_portal_type_role_list
View file @
4cfc61f1
...
@@ -82,6 +82,7 @@ Query
...
@@ -82,6 +82,7 @@ Query
Query Module
Query Module
Regularisation Request
Regularisation Request
Regularisation Request Module
Regularisation Request Module
Restricted Access Token
Sale Invoice Transaction
Sale Invoice Transaction
Sale Opportunity
Sale Opportunity
Sale Opportunity Module
Sale Opportunity Module
...
@@ -111,6 +112,8 @@ System Event Module
...
@@ -111,6 +112,8 @@ System Event Module
Text
Text
Transformation
Transformation
Transformation Module
Transformation Module
Upgrade Decision
Upgrade Decision Module
Visit
Visit
Web Message
Web Message
Web Page
Web Page
...
...
master/bt5/slapos_erp5/bt/template_portal_type_roles_list
View file @
4cfc61f1
...
@@ -82,6 +82,7 @@ Query
...
@@ -82,6 +82,7 @@ Query
Query Module
Query Module
Regularisation Request
Regularisation Request
Regularisation Request Module
Regularisation Request Module
Restricted Access Token
Sale Invoice Transaction
Sale Invoice Transaction
Sale Opportunity
Sale Opportunity
Sale Opportunity Module
Sale Opportunity Module
...
@@ -111,6 +112,8 @@ System Event Module
...
@@ -111,6 +112,8 @@ System Event Module
Text
Text
Transformation
Transformation
Transformation Module
Transformation Module
Upgrade Decision
Upgrade Decision Module
Visit
Visit
Web Message
Web Message
Web Page
Web Page
...
...
master/bt5/slapos_erp5/bt/template_portal_type_workflow_chain_list
View file @
4cfc61f1
...
@@ -12,3 +12,4 @@ Sale Packing List | local_permission_slapos_interaction_workflow
...
@@ -12,3 +12,4 @@ Sale Packing List | local_permission_slapos_interaction_workflow
Slave Instance | local_permission_slapos_interaction_workflow
Slave Instance | local_permission_slapos_interaction_workflow
Software Installation | local_permission_slapos_interaction_workflow
Software Installation | local_permission_slapos_interaction_workflow
Software Instance | local_permission_slapos_interaction_workflow
Software Instance | local_permission_slapos_interaction_workflow
Upgrade Decision | local_permission_slapos_interation_workflow
\ No newline at end of file
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment