[Erp5-dev] [Erp5-report] r19319 - in /erp5/trunk/bt5/erp5_accounting: ModuleTemplateItem/ bt/

Mikolaj Antoszkiewicz mikolaj at erp5.pl
Fri Feb 15 12:04:43 CET 2008


Hello

What's the rationale behind Author not  being able to View the object he 
  created? He can't even check if it was created correctly...
I know - if that's the need then person can have Auditor also.
But then would Author be used alone anywhere, since these two roles are 
actually unseparable?

Mikolaj

nobody at svn.erp5.org wrote:
> Author: jerome
> Date: Thu Feb 14 19:17:43 2008
> New Revision: 19319
> 
> URL: http://svn.erp5.org?rev=19319&view=rev
> Log:
> 2008-2-14 jerome
> * change permissions on account_module and accounting_module. Auditor role now have Copy or Move (it was missing). Note that the difference with the current version of Base_setDefaultSecurity is that Author role does *not* have View permission. Author creates, Auditor views. For normal cases you should give both roles to thoses users.
> 
> Modified:
>     erp5/trunk/bt5/erp5_accounting/ModuleTemplateItem/account_module.xml
>     erp5/trunk/bt5/erp5_accounting/ModuleTemplateItem/accounting_module.xml
>     erp5/trunk/bt5/erp5_accounting/bt/change_log
>     erp5/trunk/bt5/erp5_accounting/bt/revision
> 
> Modified: erp5/trunk/bt5/erp5_accounting/ModuleTemplateItem/account_module.xml
> URL: http://svn.erp5.org/erp5/trunk/bt5/erp5_accounting/ModuleTemplateItem/account_module.xml?rev=19319&r1=19318&r2=19319&view=diff
> ==============================================================================
> --- erp5/trunk/bt5/erp5_accounting/ModuleTemplateItem/account_module.xml (original)
> +++ erp5/trunk/bt5/erp5_accounting/ModuleTemplateItem/account_module.xml Thu Feb 14 19:17:43 2008
> @@ -7,7 +7,6 @@
>     <role>Assignor</role>
>     <role>Associate</role>
>     <role>Auditor</role>
> -   <role>Author</role>
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> @@ -37,304 +36,309 @@
>     <role>Assignor</role>
>     <role>Associate</role>
>     <role>Auditor</role>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Accelerated HTTP Cache Managers</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add BTreeFolder2s</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Browser Id Manager</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMF Action Icons Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMF Active Processs</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMF Caching Policy Managers</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMF Calendar Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMF Core Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMF Default Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMF Report Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMF Setup Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMF Sites</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMF Unique Id Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMFActivity Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMFCategory Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMFMailIn Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Configured CMF Sites</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Content Type Registrys</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Cookie Crumblers</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Database Methods</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Documents, Images, and Files</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5 Filesystem Formulator Forms</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5 Forms</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5 OOo Templates</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5 PDF Forms</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5 PDF Templates</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5 Publications</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5 Reports</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5 Sites</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5 Subscriptions</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5 Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5Catalog Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5Form Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5Subversion Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5SyncML Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5Type Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ExtFiles</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ExtImages</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add External Methods</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Filesystem Directory Views</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Folders</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Formulator Forms</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Local File Systems</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add LocalContents</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add LocalFolders</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Localizers</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add MailHost objects</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add MessageCatalogs</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add MimetypesRegistry Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Page Templates</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Pluggable Index</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Plugin Registrys</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add PortalTransforms Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Python Scripts</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add RAM Cache Managers</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ReStructuredText Documents</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Session Data Manager</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Site Roots</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Temporary Folder</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Transient Object Container</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add User Folders</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Virtual Host Monsters</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Vocabularies</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Z Gadfly Database Connections</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Z MySQL Database Connections</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Z MySQL Deferred Database Connections</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ZCatalogs</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ZMailIn Clients</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ZMailMessages</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ZODB Mount Points</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Zope Tutorials</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add portal content</name>
> +   <role>Assignor</role>
>     <role>Author</role>
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> -   <name>AccessContentsInformation</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Accelerated HTTP Cache Managers</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add BTreeFolder2s</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Browser Id Manager</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add CMF Action Icons Tools</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add CMF Active Processs</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add CMF Caching Policy Managers</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add CMF Calendar Tools</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add CMF Core Tools</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add CMF Default Tools</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add CMF Report Tools</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add CMF Setup Tools</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add CMF Sites</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add CMF Unique Id Tools</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add CMFActivity Tools</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add CMFCategory Tools</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add CMFMailIn Tools</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add Configured CMF Sites</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Content Type Registrys</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Cookie Crumblers</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Database Methods</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Documents, Images, and Files</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ERP5 Filesystem Formulator Forms</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ERP5 Forms</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add ERP5 OOo Templates</name>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add ERP5 PDF Forms</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ERP5 PDF Templates</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add ERP5 Publications</name>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add ERP5 Reports</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ERP5 Sites</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add ERP5 Subscriptions</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ERP5 Tools</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ERP5Catalog Tools</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ERP5Form Tools</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add ERP5Subversion Tools</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ERP5SyncML Tools</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ERP5Type Tools</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ExtFiles</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ExtImages</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add External Methods</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Filesystem Directory Views</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Folders</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Formulator Forms</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add LocalContents</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add LocalFolders</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Localizers</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add MailHost objects</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add MessageCatalogs</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Page Templates</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Photo Folders</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Photos</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Pluggable Index</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add Plugin Registrys</name>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add Portal ZSyncer Tools</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Python Scripts</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add RAM Cache Managers</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ReStructuredText Documents</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Session Data Manager</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Site Roots</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Temporary Folder</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Transient Object Container</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add User Folders</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Versions</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Virtual Host Monsters</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Vocabularies</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Z Gadfly Database Connections</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Z MySQL Database Connections</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add Z MySQL Database Deferred Connections</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ZCatalogs</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ZMailIn Clients</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ZMailMessages</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ZODB Mount Points</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add ZSyncers</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Zope Tutorials</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add portal content</name>
> +   <name>Add portal events</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add portal folders</name>
>     <role>Assignor</role>
>     <role>Author</role>
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> -   <name>Add portal events</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add portal folders</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
>     <name>Add portal member</name>
>     <role>Manager</role>
>    </permission>
> @@ -383,6 +387,10 @@
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> +   <name>Change Local File System properties</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
>     <name>Change Lock Information</name>
>     <role>Manager</role>
>    </permission>
> @@ -391,10 +399,6 @@
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> -   <name>Change Photo</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
>     <name>Change Python Scripts</name>
>     <role>Manager</role>
>    </permission>
> @@ -430,8 +434,10 @@
>     <name>Change configuration</name>
>     <role>Manager</role>
>    </permission>
> -  <permission type='list'>
> +  <permission type='tuple'>
>     <name>Change local roles</name>
> +   <role>Assignor</role>
> +   <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
>     <name>Change permissions</name>
> @@ -451,7 +457,10 @@
>    </permission>
>    <permission type='tuple'>
>     <name>Copy or Move</name>
> -   <role>Assignor</role>
> +   <role>Assignee</role>
> +   <role>Assignor</role>
> +   <role>Associate</role>
> +   <role>Auditor</role>
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> @@ -467,6 +476,10 @@
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> +   <name>Delete local files</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
>     <name>Delete objects</name>
>     <role>Assignor</role>
>     <role>Manager</role>
> @@ -481,6 +494,10 @@
>    </permission>
>    <permission type='tuple'>
>     <name>Edit ReStructuredText</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Edit target</name>
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> @@ -501,7 +518,6 @@
>     <role>Assignor</role>
>     <role>Associate</role>
>     <role>Auditor</role>
> -   <role>Author</role>
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> @@ -528,8 +544,13 @@
>     <name>Manage Access Rules</name>
>     <role>Manager</role>
>    </permission>
> -  <permission type='list'>
> +  <permission type='tuple'>
>     <name>Manage Groups</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Manage Selenium test cases</name>
> +   <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
>     <name>Manage Transient Object Container</name>
> @@ -560,6 +581,10 @@
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> +   <name>Manage local files</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
>     <name>Manage messages</name>
>     <role>Manager</role>
>    </permission>
> @@ -593,6 +618,10 @@
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> +   <name>Overwrite local files</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
>     <name>Post mail to ZMailIn</name>
>     <role>Manager</role>
>    </permission>
> @@ -620,8 +649,9 @@
>     <name>Search ZCatalog</name>
>     <role>Manager</role>
>    </permission>
> -  <permission type='list'>
> +  <permission type='tuple'>
>     <name>Search for principals</name>
> +   <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
>     <name>Set own password</name>
> @@ -641,8 +671,6 @@
>    </permission>
>    <permission type='tuple'>
>     <name>Translate Content</name>
> -   <role>Assignor</role>
> -   <role>Author</role>
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> @@ -650,11 +678,19 @@
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> +   <name>Upload local files</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
>     <name>Use Database Methods</name>
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
>     <name>Use Factories</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Use external editor</name>
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> @@ -667,7 +703,10 @@
>     <role>Assignor</role>
>     <role>Associate</role>
>     <role>Auditor</role>
> -   <role>Author</role>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>View Directory Index</name>
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> @@ -676,7 +715,6 @@
>     <role>Assignor</role>
>     <role>Associate</role>
>     <role>Auditor</role>
> -   <role>Author</role>
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> @@ -698,15 +736,6 @@
>    <permission type='tuple'>
>     <name>WebDAV access</name>
>     <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>ZSyncer: Use ZSyncer</name>
> -  </permission>
> -  <permission type='list'>
> -   <name>ZopeProfiler: manage</name>
> -  </permission>
> -  <permission type='list'>
> -   <name>ZopeProfiler: view</name>
>    </permission>
>   </permission_list>
>   <portal_type>Account Module</portal_type>
> 
> Modified: erp5/trunk/bt5/erp5_accounting/ModuleTemplateItem/accounting_module.xml
> URL: http://svn.erp5.org/erp5/trunk/bt5/erp5_accounting/ModuleTemplateItem/accounting_module.xml?rev=19319&r1=19318&r2=19319&view=diff
> ==============================================================================
> --- erp5/trunk/bt5/erp5_accounting/ModuleTemplateItem/accounting_module.xml (original)
> +++ erp5/trunk/bt5/erp5_accounting/ModuleTemplateItem/accounting_module.xml Thu Feb 14 19:17:43 2008
> @@ -7,7 +7,6 @@
>     <role>Assignor</role>
>     <role>Associate</role>
>     <role>Auditor</role>
> -   <role>Author</role>
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> @@ -37,304 +36,309 @@
>     <role>Assignor</role>
>     <role>Associate</role>
>     <role>Auditor</role>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Accelerated HTTP Cache Managers</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add BTreeFolder2s</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Browser Id Manager</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMF Action Icons Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMF Active Processs</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMF Caching Policy Managers</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMF Calendar Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMF Core Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMF Default Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMF Report Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMF Setup Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMF Sites</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMF Unique Id Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMFActivity Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMFCategory Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add CMFMailIn Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Configured CMF Sites</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Content Type Registrys</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Cookie Crumblers</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Database Methods</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Documents, Images, and Files</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5 Filesystem Formulator Forms</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5 Forms</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5 OOo Templates</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5 PDF Forms</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5 PDF Templates</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5 Publications</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5 Reports</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5 Sites</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5 Subscriptions</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5 Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5Catalog Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5Form Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5Subversion Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5SyncML Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ERP5Type Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ExtFiles</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ExtImages</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add External Methods</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Filesystem Directory Views</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Folders</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Formulator Forms</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Local File Systems</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add LocalContents</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add LocalFolders</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Localizers</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add MailHost objects</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add MessageCatalogs</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add MimetypesRegistry Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Page Templates</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Pluggable Index</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Plugin Registrys</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add PortalTransforms Tools</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Python Scripts</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add RAM Cache Managers</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ReStructuredText Documents</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Session Data Manager</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Site Roots</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Temporary Folder</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Transient Object Container</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add User Folders</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Virtual Host Monsters</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Vocabularies</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Z Gadfly Database Connections</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Z MySQL Database Connections</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Z MySQL Deferred Database Connections</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ZCatalogs</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ZMailIn Clients</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ZMailMessages</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add ZODB Mount Points</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add Zope Tutorials</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add portal content</name>
> +   <role>Assignor</role>
>     <role>Author</role>
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> -   <name>AccessContentsInformation</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Accelerated HTTP Cache Managers</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add BTreeFolder2s</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Browser Id Manager</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add CMF Action Icons Tools</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add CMF Active Processs</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add CMF Caching Policy Managers</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add CMF Calendar Tools</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add CMF Core Tools</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add CMF Default Tools</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add CMF Report Tools</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add CMF Setup Tools</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add CMF Sites</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add CMF Unique Id Tools</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add CMFActivity Tools</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add CMFCategory Tools</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add CMFMailIn Tools</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add Configured CMF Sites</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Content Type Registrys</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Cookie Crumblers</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Database Methods</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Documents, Images, and Files</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ERP5 Filesystem Formulator Forms</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ERP5 Forms</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add ERP5 OOo Templates</name>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add ERP5 PDF Forms</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ERP5 PDF Templates</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add ERP5 Publications</name>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add ERP5 Reports</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ERP5 Sites</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add ERP5 Subscriptions</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ERP5 Tools</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ERP5Catalog Tools</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ERP5Form Tools</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add ERP5Subversion Tools</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ERP5SyncML Tools</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ERP5Type Tools</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ExtFiles</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ExtImages</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add External Methods</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Filesystem Directory Views</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Folders</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Formulator Forms</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add LocalContents</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add LocalFolders</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Localizers</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add MailHost objects</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add MessageCatalogs</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Page Templates</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Photo Folders</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Photos</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Pluggable Index</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add Plugin Registrys</name>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add Portal ZSyncer Tools</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Python Scripts</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add RAM Cache Managers</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ReStructuredText Documents</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Session Data Manager</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Site Roots</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Temporary Folder</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Transient Object Container</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add User Folders</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Versions</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Virtual Host Monsters</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Vocabularies</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Z Gadfly Database Connections</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Z MySQL Database Connections</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add Z MySQL Database Deferred Connections</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ZCatalogs</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ZMailIn Clients</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ZMailMessages</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add ZODB Mount Points</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>Add ZSyncers</name>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add Zope Tutorials</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add portal content</name>
> +   <name>Add portal events</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Add portal folders</name>
>     <role>Assignor</role>
>     <role>Author</role>
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> -   <name>Add portal events</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
> -   <name>Add portal folders</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
>     <name>Add portal member</name>
>     <role>Manager</role>
>    </permission>
> @@ -383,6 +387,10 @@
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> +   <name>Change Local File System properties</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
>     <name>Change Lock Information</name>
>     <role>Manager</role>
>    </permission>
> @@ -391,10 +399,6 @@
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> -   <name>Change Photo</name>
> -   <role>Manager</role>
> -  </permission>
> -  <permission type='tuple'>
>     <name>Change Python Scripts</name>
>     <role>Manager</role>
>    </permission>
> @@ -430,8 +434,10 @@
>     <name>Change configuration</name>
>     <role>Manager</role>
>    </permission>
> -  <permission type='list'>
> +  <permission type='tuple'>
>     <name>Change local roles</name>
> +   <role>Assignor</role>
> +   <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
>     <name>Change permissions</name>
> @@ -451,7 +457,10 @@
>    </permission>
>    <permission type='tuple'>
>     <name>Copy or Move</name>
> -   <role>Assignor</role>
> +   <role>Assignee</role>
> +   <role>Assignor</role>
> +   <role>Associate</role>
> +   <role>Auditor</role>
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> @@ -467,6 +476,10 @@
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> +   <name>Delete local files</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
>     <name>Delete objects</name>
>     <role>Assignor</role>
>     <role>Manager</role>
> @@ -481,6 +494,10 @@
>    </permission>
>    <permission type='tuple'>
>     <name>Edit ReStructuredText</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Edit target</name>
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> @@ -501,7 +518,6 @@
>     <role>Assignor</role>
>     <role>Associate</role>
>     <role>Auditor</role>
> -   <role>Author</role>
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> @@ -528,8 +544,13 @@
>     <name>Manage Access Rules</name>
>     <role>Manager</role>
>    </permission>
> -  <permission type='list'>
> +  <permission type='tuple'>
>     <name>Manage Groups</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Manage Selenium test cases</name>
> +   <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
>     <name>Manage Transient Object Container</name>
> @@ -560,6 +581,10 @@
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> +   <name>Manage local files</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
>     <name>Manage messages</name>
>     <role>Manager</role>
>    </permission>
> @@ -593,6 +618,10 @@
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> +   <name>Overwrite local files</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
>     <name>Post mail to ZMailIn</name>
>     <role>Manager</role>
>    </permission>
> @@ -620,8 +649,9 @@
>     <name>Search ZCatalog</name>
>     <role>Manager</role>
>    </permission>
> -  <permission type='list'>
> +  <permission type='tuple'>
>     <name>Search for principals</name>
> +   <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
>     <name>Set own password</name>
> @@ -648,11 +678,19 @@
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> +   <name>Upload local files</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
>     <name>Use Database Methods</name>
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
>     <name>Use Factories</name>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>Use external editor</name>
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> @@ -665,7 +703,10 @@
>     <role>Assignor</role>
>     <role>Associate</role>
>     <role>Auditor</role>
> -   <role>Author</role>
> +   <role>Manager</role>
> +  </permission>
> +  <permission type='tuple'>
> +   <name>View Directory Index</name>
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> @@ -674,7 +715,6 @@
>     <role>Assignor</role>
>     <role>Associate</role>
>     <role>Auditor</role>
> -   <role>Author</role>
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> @@ -683,7 +723,6 @@
>    </permission>
>    <permission type='tuple'>
>     <name>View management screens</name>
> -   <role>Assignor</role>
>     <role>Manager</role>
>    </permission>
>    <permission type='tuple'>
> @@ -697,15 +736,6 @@
>    <permission type='tuple'>
>     <name>WebDAV access</name>
>     <role>Manager</role>
> -  </permission>
> -  <permission type='list'>
> -   <name>ZSyncer: Use ZSyncer</name>
> -  </permission>
> -  <permission type='list'>
> -   <name>ZopeProfiler: manage</name>
> -  </permission>
> -  <permission type='list'>
> -   <name>ZopeProfiler: view</name>
>    </permission>
>   </permission_list>
>   <portal_type>Accounting Transaction Module</portal_type>
> 
> Modified: erp5/trunk/bt5/erp5_accounting/bt/change_log
> URL: http://svn.erp5.org/erp5/trunk/bt5/erp5_accounting/bt/change_log?rev=19319&r1=19318&r2=19319&view=diff
> ==============================================================================
> --- erp5/trunk/bt5/erp5_accounting/bt/change_log (original)
> +++ erp5/trunk/bt5/erp5_accounting/bt/change_log Thu Feb 14 19:17:43 2008
> @@ -1,3 +1,6 @@
> +2008-2-14 jerome
> +* change permissions on account_module and accounting_module. Auditor role now have Copy or Move (it was missing). Note that the difference with the current version of Base_setDefaultSecurity is that Author role does *not* have View permission. Author creates, Auditor views. For normal cases you should give both roles to thoses users.
> +
>  2008-2-12 yusei
>  * Fixed amount search bug.
>  
> 
> Modified: erp5/trunk/bt5/erp5_accounting/bt/revision
> URL: http://svn.erp5.org/erp5/trunk/bt5/erp5_accounting/bt/revision?rev=19319&r1=19318&r2=19319&view=diff
> ==============================================================================
> --- erp5/trunk/bt5/erp5_accounting/bt/revision (original)
> +++ erp5/trunk/bt5/erp5_accounting/bt/revision Thu Feb 14 19:17:43 2008
> @@ -1,1 +1,1 @@
> -600
> +604
> 
> _______________________________________________
> Erp5-report mailing list
> Erp5-report at erp5.org
> http://mail.nexedi.com/mailman/listinfo/erp5-report
> 



More information about the Erp5-dev mailing list