Skip to content

erp5
erp5
Commit 96f77bae authored by Jérome Perrin's avatar Jérome Perrin
Browse files
Options

Set minimal security on currency, organisation and person modules 

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@14988 20353a03-c40f-0410-a6d1-a30d3c3de9de
parent bf0931f7
Expand all Show whitespace changes
Inline Side-by-side
Showing with 588 additions and 235 deletions
bt5/erp5_base/ModuleTemplateItem/organisation_module.xml
View file @ 96f77bae
...@@ -9,7 +9,6 @@ ...@@ -9,7 +9,6 @@
<role>Auditor</role> <role>Auditor</role>
<role>Author</role> <role>Author</role>
<role>Manager</role> <role>Manager</role>
<role>Owner</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Access arbitrary user session data</name> <name>Access arbitrary user session data</name>
...@@ -23,7 +22,6 @@ ...@@ -23,7 +22,6 @@
<role>Auditor</role> <role>Auditor</role>
<role>Author</role> <role>Author</role>
<role>Manager</role> <role>Manager</role>
<role>Owner</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Access future portal content</name> <name>Access future portal content</name>
...@@ -41,7 +39,6 @@ ...@@ -41,7 +39,6 @@
<role>Auditor</role> <role>Auditor</role>
<role>Author</role> <role>Author</role>
<role>Manager</role> <role>Manager</role>
<role>Owner</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Add Accelerated HTTP Cache Managers</name> <name>Add Accelerated HTTP Cache Managers</name>
...@@ -55,8 +52,9 @@ ...@@ -55,8 +52,9 @@
<name>Add Browser Id Manager</name> <name>Add Browser Id Manager</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='list'> <permission type='tuple'>
<name>Add CMF Action Icons Tools</name> <name>Add CMF Action Icons Tools</name>
<role>Manager</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Add CMF Active Processs</name> <name>Add CMF Active Processs</name>
...@@ -66,29 +64,33 @@ ...@@ -66,29 +64,33 @@
<name>Add CMF Caching Policy Managers</name> <name>Add CMF Caching Policy Managers</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='list'> <permission type='tuple'>
<name>Add CMF Calendar Tools</name> <name>Add CMF Calendar Tools</name>
<role>Manager</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Add CMF Core Tools</name> <name>Add CMF Core Tools</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='list'> <permission type='tuple'>
<name>Add CMF Default Tools</name> <name>Add CMF Default Tools</name>
<role>Manager</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Add CMF Report Tools</name> <name>Add CMF Report Tools</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='list'> <permission type='tuple'>
<name>Add CMF Setup Tools</name> <name>Add CMF Setup Tools</name>
<role>Manager</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Add CMF Sites</name> <name>Add CMF Sites</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='list'> <permission type='tuple'>
<name>Add CMF Unique Id Tools</name> <name>Add CMF Unique Id Tools</name>
<role>Manager</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Add CMFActivity Tools</name> <name>Add CMFActivity Tools</name>
...@@ -102,8 +104,9 @@ ...@@ -102,8 +104,9 @@
<name>Add CMFMailIn Tools</name> <name>Add CMFMailIn Tools</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='list'> <permission type='tuple'>
<name>Add Configured CMF Sites</name> <name>Add Configured CMF Sites</name>
<role>Manager</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Add Content Type Registrys</name> <name>Add Content Type Registrys</name>
...@@ -113,6 +116,14 @@ ...@@ -113,6 +116,14 @@
<name>Add Cookie Crumblers</name> <name>Add Cookie Crumblers</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='tuple'>
<name>Add DCOracle2 Database Connections</name>
<role>Manager</role>
</permission>
<permission type='tuple'>
<name>Add DCOracle2 Stored Procedures</name>
<role>Manager</role>
</permission>
<permission type='tuple'> <permission type='tuple'>
<name>Add Database Methods</name> <name>Add Database Methods</name>
<role>Manager</role> <role>Manager</role>
...@@ -129,28 +140,33 @@ ...@@ -129,28 +140,33 @@
<name>Add ERP5 Forms</name> <name>Add ERP5 Forms</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='list'> <permission type='tuple'>
<name>Add ERP5 OOo Templates</name> <name>Add ERP5 OOo Templates</name>
<role>Manager</role>
</permission> </permission>
<permission type='list'> <permission type='tuple'>
<name>Add ERP5 PDF Forms</name> <name>Add ERP5 PDF Forms</name>
<role>Manager</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Add ERP5 PDF Templates</name> <name>Add ERP5 PDF Templates</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='list'> <permission type='tuple'>
<name>Add ERP5 Publications</name> <name>Add ERP5 Publications</name>
<role>Manager</role>
</permission> </permission>
<permission type='list'> <permission type='tuple'>
<name>Add ERP5 Reports</name> <name>Add ERP5 Reports</name>
<role>Manager</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Add ERP5 Sites</name> <name>Add ERP5 Sites</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='list'> <permission type='tuple'>
<name>Add ERP5 Subscriptions</name> <name>Add ERP5 Subscriptions</name>
<role>Manager</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Add ERP5 Tools</name> <name>Add ERP5 Tools</name>
...@@ -164,8 +180,9 @@ ...@@ -164,8 +180,9 @@
<name>Add ERP5Form Tools</name> <name>Add ERP5Form Tools</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='list'> <permission type='tuple'>
<name>Add ERP5Subversion Tools</name> <name>Add ERP5Subversion Tools</name>
<role>Manager</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Add ERP5SyncML Tools</name> <name>Add ERP5SyncML Tools</name>
...@@ -219,16 +236,33 @@ ...@@ -219,16 +236,33 @@
<name>Add MessageCatalogs</name> <name>Add MessageCatalogs</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='tuple'>
<name>Add MimetypesRegistry Tools</name>
<role>Manager</role>
</permission>
<permission type='tuple'> <permission type='tuple'>
<name>Add Page Templates</name> <name>Add Page Templates</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='tuple'>
<name>Add Photo Folders</name>
<role>Manager</role>
</permission>
<permission type='tuple'>
<name>Add Photos</name>
<role>Manager</role>
</permission>
<permission type='tuple'> <permission type='tuple'>
<name>Add Pluggable Index</name> <name>Add Pluggable Index</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='list'> <permission type='tuple'>
<name>Add Plugin Registrys</name> <name>Add Plugin Registrys</name>
<role>Manager</role>
</permission>
<permission type='tuple'>
<name>Add PortalTransforms Tools</name>
<role>Manager</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Add Python Scripts</name> <name>Add Python Scripts</name>
...@@ -282,8 +316,9 @@ ...@@ -282,8 +316,9 @@
<name>Add Z MySQL Database Connections</name> <name>Add Z MySQL Database Connections</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='list'> <permission type='tuple'>
<name>Add Z MySQL Deferred Database Connections</name> <name>Add Z MySQL Deferred Database Connections</name>
<role>Manager</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Add ZCatalogs</name> <name>Add ZCatalogs</name>
...@@ -317,6 +352,8 @@ ...@@ -317,6 +352,8 @@
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Add portal folders</name> <name>Add portal folders</name>
<role>Assignor</role>
<role>Author</role>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
...@@ -331,6 +368,10 @@ ...@@ -331,6 +368,10 @@
<name>Change Browser Id Manager</name> <name>Change Browser Id Manager</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='tuple'>
<name>Change DCOracle2 Stored Procedures</name>
<role>Manager</role>
</permission>
<permission type='tuple'> <permission type='tuple'>
<name>Change DTML Documents</name> <name>Change DTML Documents</name>
<role>Manager</role> <role>Manager</role>
...@@ -375,6 +416,10 @@ ...@@ -375,6 +416,10 @@
<name>Change Page Templates</name> <name>Change Page Templates</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='tuple'>
<name>Change Photo</name>
<role>Manager</role>
</permission>
<permission type='tuple'> <permission type='tuple'>
<name>Change Python Scripts</name> <name>Change Python Scripts</name>
<role>Manager</role> <role>Manager</role>
...@@ -411,8 +456,10 @@ ...@@ -411,8 +456,10 @@
<name>Change configuration</name> <name>Change configuration</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='list'> <permission type='tuple'>
<name>Change local roles</name> <name>Change local roles</name>
<role>Assignor</role>
<role>Manager</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Change permissions</name> <name>Change permissions</name>
...@@ -432,10 +479,7 @@ ...@@ -432,10 +479,7 @@
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Copy or Move</name> <name>Copy or Move</name>
<role>Assignor</role>
<role>Author</role>
<role>Manager</role> <role>Manager</role>
<role>Owner</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Create Transient Objects</name> <name>Create Transient Objects</name>
...@@ -453,7 +497,6 @@ ...@@ -453,7 +497,6 @@
<name>Delete objects</name> <name>Delete objects</name>
<role>Assignor</role> <role>Assignor</role>
<role>Manager</role> <role>Manager</role>
<role>Owner</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Download ExtFile/ExtImage</name> <name>Download ExtFile/ExtImage</name>
...@@ -467,8 +510,13 @@ ...@@ -467,8 +510,13 @@
<name>Edit ReStructuredText</name> <name>Edit ReStructuredText</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='list'> <permission type='tuple'>
<name>Edit target</name> <name>Edit target</name>
<role>Manager</role>
</permission>
<permission type='tuple'>
<name>Execute DCOracle2 Stored Procedures</name>
<role>Manager</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>FTP access</name> <name>FTP access</name>
...@@ -490,7 +538,6 @@ ...@@ -490,7 +538,6 @@
<role>Auditor</role> <role>Auditor</role>
<role>Author</role> <role>Author</role>
<role>Manager</role> <role>Manager</role>
<role>Owner</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>List portal members</name> <name>List portal members</name>
...@@ -516,8 +563,13 @@ ...@@ -516,8 +563,13 @@
<name>Manage Access Rules</name> <name>Manage Access Rules</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='list'> <permission type='tuple'>
<name>Manage Groups</name> <name>Manage Groups</name>
<role>Manager</role>
</permission>
<permission type='tuple'>
<name>Manage Selenium test cases</name>
<role>Manager</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Manage Transient Object Container</name> <name>Manage Transient Object Container</name>
...@@ -543,6 +595,10 @@ ...@@ -543,6 +595,10 @@
<name>Manage ZCatalogIndex Entries</name> <name>Manage ZCatalogIndex Entries</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='tuple'>
<name>Manage extensions</name>
<role>Manager</role>
</permission>
<permission type='tuple'> <permission type='tuple'>
<name>Manage languages</name> <name>Manage languages</name>
<role>Manager</role> <role>Manager</role>
...@@ -569,10 +625,8 @@ ...@@ -569,10 +625,8 @@
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Modify portal content</name> <name>Modify portal content</name>
<role>Assignee</role>
<role>Assignor</role> <role>Assignor</role>
<role>Manager</role> <role>Manager</role>
<role>Owner</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Open/Close Database Connection</name> <name>Open/Close Database Connection</name>
...@@ -610,8 +664,9 @@ ...@@ -610,8 +664,9 @@
<name>Search ZCatalog</name> <name>Search ZCatalog</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='list'> <permission type='tuple'>
<name>Search for principals</name> <name>Search for principals</name>
<role>Manager</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Set own password</name> <name>Set own password</name>
...@@ -631,10 +686,7 @@ ...@@ -631,10 +686,7 @@
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Translate Content</name> <name>Translate Content</name>
<role>Assignee</role>
<role>Assignor</role>
<role>Manager</role> <role>Manager</role>
<role>Owner</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>Undo changes</name> <name>Undo changes</name>
...@@ -648,6 +700,10 @@ ...@@ -648,6 +700,10 @@
<name>Use Factories</name> <name>Use Factories</name>
<role>Manager</role> <role>Manager</role>
</permission> </permission>
<permission type='tuple'>
<name>Use external editor</name>
<role>Manager</role>
</permission>
<permission type='tuple'> <permission type='tuple'>
<name>Use mailhost services</name> <name>Use mailhost services</name>
<role>Manager</role> <role>Manager</role>
...@@ -660,7 +716,6 @@ ...@@ -660,7 +716,6 @@
<role>Auditor</role> <role>Auditor</role>
<role>Author</role> <role>Author</role>
<role>Manager</role> <role>Manager</role>
<role>Owner</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>View History</name> <name>View History</name>
...@@ -670,7 +725,6 @@ ...@@ -670,7 +725,6 @@
<role>Auditor</role> <role>Auditor</role>
<role>Author</role> <role>Author</role>
<role>Manager</role> <role>Manager</role>
<role>Owner</role>
</permission> </permission>
<permission type='tuple'> <permission type='tuple'>
<name>View ZMailMessage</name> <name>View ZMailMessage</name>
......
bt5/erp5_base/bt/revision
View file @ 96f77bae
120 122
\ No newline at end of file \ No newline at end of file
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment
GitLab Nexedi Edition | About GitLab | About Nexedi | 沪ICP备2021021310号-2 | 沪ICP备2021021310号-7