[Erp5-dev] [Erp5-report] r19319 - in /erp5/trunk/bt5/erp5_accounting: ModuleTemplateItem/ bt/

Jérome Perrin jerome at nexedi.com
Fri Feb 15 13:13:54 CET 2008


Mikolaj Antoszkiewicz a écrit :
> Hello
> 
> What's the rationale behind Author not  being able to View the object he 
>   created? He can't even check if it was created correctly...

Hello,

This security setting is actually on the module. With this change, 
Author cannot enter the module, so he cannot create using the standard 
interface, but Author can create "implicitly" using scripts or delivery 
builders.

IMHO we need such a distinction if we want, for example, accountants to 
create transactions as usual (Author+Auditor), but we don't want the 
person that validate packing lists to view accounting module. This 
person will need 'Add portal content' permission on accounting module to 
create the auto-generated invoice, so he needs Author role.

Arguments for "we don't need this", is that even if this person can 
enter the module, he won't see any documents inside, because security is 
set on documents as well.

This use of Author role is still to be discussed, but it's in any case 
not specific to accounting module, and this could be applied anywhere.

Jérome

> I know - if that's the need then person can have Auditor also.
> But then would Author be used alone anywhere, since these two roles are 
> actually unseparable?
> 
> Mikolaj
> 
> nobody at svn.erp5.org wrote:
>> Author: jerome
>> Date: Thu Feb 14 19:17:43 2008
>> New Revision: 19319
>>
>> URL: http://svn.erp5.org?rev=19319&view=rev
>> Log:
>> 2008-2-14 jerome
>> * change permissions on account_module and accounting_module. Auditor role now have Copy or Move (it was missing). Note that the difference with the current version of Base_setDefaultSecurity is that Author role does *not* have View permission. Author creates, Auditor views. For normal cases you should give both roles to thoses users.
>>
>> Modified:
>>     erp5/trunk/bt5/erp5_accounting/ModuleTemplateItem/account_module.xml
>>     erp5/trunk/bt5/erp5_accounting/ModuleTemplateItem/accounting_module.xml
>>     erp5/trunk/bt5/erp5_accounting/bt/change_log
>>     erp5/trunk/bt5/erp5_accounting/bt/revision
>>
>> Modified: erp5/trunk/bt5/erp5_accounting/ModuleTemplateItem/account_module.xml
>> URL: http://svn.erp5.org/erp5/trunk/bt5/erp5_accounting/ModuleTemplateItem/account_module.xml?rev=19319&r1=19318&r2=19319&view=diff
>> ==============================================================================
>> --- erp5/trunk/bt5/erp5_accounting/ModuleTemplateItem/account_module.xml (original)
>> +++ erp5/trunk/bt5/erp5_accounting/ModuleTemplateItem/account_module.xml Thu Feb 14 19:17:43 2008
>> @@ -7,7 +7,6 @@
>>     <role>Assignor</role>
>>     <role>Associate</role>
>>     <role>Auditor</role>
>> -   <role>Author</role>
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> @@ -37,304 +36,309 @@
>>     <role>Assignor</role>
>>     <role>Associate</role>
>>     <role>Auditor</role>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Accelerated HTTP Cache Managers</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add BTreeFolder2s</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Browser Id Manager</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMF Action Icons Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMF Active Processs</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMF Caching Policy Managers</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMF Calendar Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMF Core Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMF Default Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMF Report Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMF Setup Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMF Sites</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMF Unique Id Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMFActivity Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMFCategory Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMFMailIn Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Configured CMF Sites</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Content Type Registrys</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Cookie Crumblers</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Database Methods</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Documents, Images, and Files</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5 Filesystem Formulator Forms</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5 Forms</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5 OOo Templates</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5 PDF Forms</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5 PDF Templates</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5 Publications</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5 Reports</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5 Sites</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5 Subscriptions</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5 Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5Catalog Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5Form Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5Subversion Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5SyncML Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5Type Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ExtFiles</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ExtImages</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add External Methods</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Filesystem Directory Views</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Folders</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Formulator Forms</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Local File Systems</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add LocalContents</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add LocalFolders</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Localizers</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add MailHost objects</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add MessageCatalogs</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add MimetypesRegistry Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Page Templates</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Pluggable Index</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Plugin Registrys</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add PortalTransforms Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Python Scripts</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add RAM Cache Managers</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ReStructuredText Documents</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Session Data Manager</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Site Roots</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Temporary Folder</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Transient Object Container</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add User Folders</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Virtual Host Monsters</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Vocabularies</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Z Gadfly Database Connections</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Z MySQL Database Connections</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Z MySQL Deferred Database Connections</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ZCatalogs</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ZMailIn Clients</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ZMailMessages</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ZODB Mount Points</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Zope Tutorials</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add portal content</name>
>> +   <role>Assignor</role>
>>     <role>Author</role>
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> -   <name>AccessContentsInformation</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Accelerated HTTP Cache Managers</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add BTreeFolder2s</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Browser Id Manager</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add CMF Action Icons Tools</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add CMF Active Processs</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add CMF Caching Policy Managers</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add CMF Calendar Tools</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add CMF Core Tools</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add CMF Default Tools</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add CMF Report Tools</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add CMF Setup Tools</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add CMF Sites</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add CMF Unique Id Tools</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add CMFActivity Tools</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add CMFCategory Tools</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add CMFMailIn Tools</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add Configured CMF Sites</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Content Type Registrys</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Cookie Crumblers</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Database Methods</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Documents, Images, and Files</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ERP5 Filesystem Formulator Forms</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ERP5 Forms</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add ERP5 OOo Templates</name>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add ERP5 PDF Forms</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ERP5 PDF Templates</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add ERP5 Publications</name>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add ERP5 Reports</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ERP5 Sites</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add ERP5 Subscriptions</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ERP5 Tools</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ERP5Catalog Tools</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ERP5Form Tools</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add ERP5Subversion Tools</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ERP5SyncML Tools</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ERP5Type Tools</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ExtFiles</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ExtImages</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add External Methods</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Filesystem Directory Views</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Folders</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Formulator Forms</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add LocalContents</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add LocalFolders</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Localizers</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add MailHost objects</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add MessageCatalogs</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Page Templates</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Photo Folders</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Photos</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Pluggable Index</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add Plugin Registrys</name>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add Portal ZSyncer Tools</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Python Scripts</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add RAM Cache Managers</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ReStructuredText Documents</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Session Data Manager</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Site Roots</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Temporary Folder</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Transient Object Container</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add User Folders</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Versions</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Virtual Host Monsters</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Vocabularies</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Z Gadfly Database Connections</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Z MySQL Database Connections</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add Z MySQL Database Deferred Connections</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ZCatalogs</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ZMailIn Clients</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ZMailMessages</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ZODB Mount Points</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add ZSyncers</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Zope Tutorials</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add portal content</name>
>> +   <name>Add portal events</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add portal folders</name>
>>     <role>Assignor</role>
>>     <role>Author</role>
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> -   <name>Add portal events</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add portal folders</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>>     <name>Add portal member</name>
>>     <role>Manager</role>
>>    </permission>
>> @@ -383,6 +387,10 @@
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> +   <name>Change Local File System properties</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>>     <name>Change Lock Information</name>
>>     <role>Manager</role>
>>    </permission>
>> @@ -391,10 +399,6 @@
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> -   <name>Change Photo</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>>     <name>Change Python Scripts</name>
>>     <role>Manager</role>
>>    </permission>
>> @@ -430,8 +434,10 @@
>>     <name>Change configuration</name>
>>     <role>Manager</role>
>>    </permission>
>> -  <permission type='list'>
>> +  <permission type='tuple'>
>>     <name>Change local roles</name>
>> +   <role>Assignor</role>
>> +   <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>>     <name>Change permissions</name>
>> @@ -451,7 +457,10 @@
>>    </permission>
>>    <permission type='tuple'>
>>     <name>Copy or Move</name>
>> -   <role>Assignor</role>
>> +   <role>Assignee</role>
>> +   <role>Assignor</role>
>> +   <role>Associate</role>
>> +   <role>Auditor</role>
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> @@ -467,6 +476,10 @@
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> +   <name>Delete local files</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>>     <name>Delete objects</name>
>>     <role>Assignor</role>
>>     <role>Manager</role>
>> @@ -481,6 +494,10 @@
>>    </permission>
>>    <permission type='tuple'>
>>     <name>Edit ReStructuredText</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Edit target</name>
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> @@ -501,7 +518,6 @@
>>     <role>Assignor</role>
>>     <role>Associate</role>
>>     <role>Auditor</role>
>> -   <role>Author</role>
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> @@ -528,8 +544,13 @@
>>     <name>Manage Access Rules</name>
>>     <role>Manager</role>
>>    </permission>
>> -  <permission type='list'>
>> +  <permission type='tuple'>
>>     <name>Manage Groups</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Manage Selenium test cases</name>
>> +   <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>>     <name>Manage Transient Object Container</name>
>> @@ -560,6 +581,10 @@
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> +   <name>Manage local files</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>>     <name>Manage messages</name>
>>     <role>Manager</role>
>>    </permission>
>> @@ -593,6 +618,10 @@
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> +   <name>Overwrite local files</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>>     <name>Post mail to ZMailIn</name>
>>     <role>Manager</role>
>>    </permission>
>> @@ -620,8 +649,9 @@
>>     <name>Search ZCatalog</name>
>>     <role>Manager</role>
>>    </permission>
>> -  <permission type='list'>
>> +  <permission type='tuple'>
>>     <name>Search for principals</name>
>> +   <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>>     <name>Set own password</name>
>> @@ -641,8 +671,6 @@
>>    </permission>
>>    <permission type='tuple'>
>>     <name>Translate Content</name>
>> -   <role>Assignor</role>
>> -   <role>Author</role>
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> @@ -650,11 +678,19 @@
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> +   <name>Upload local files</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>>     <name>Use Database Methods</name>
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>>     <name>Use Factories</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Use external editor</name>
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> @@ -667,7 +703,10 @@
>>     <role>Assignor</role>
>>     <role>Associate</role>
>>     <role>Auditor</role>
>> -   <role>Author</role>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>View Directory Index</name>
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> @@ -676,7 +715,6 @@
>>     <role>Assignor</role>
>>     <role>Associate</role>
>>     <role>Auditor</role>
>> -   <role>Author</role>
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> @@ -698,15 +736,6 @@
>>    <permission type='tuple'>
>>     <name>WebDAV access</name>
>>     <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>ZSyncer: Use ZSyncer</name>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>ZopeProfiler: manage</name>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>ZopeProfiler: view</name>
>>    </permission>
>>   </permission_list>
>>   <portal_type>Account Module</portal_type>
>>
>> Modified: erp5/trunk/bt5/erp5_accounting/ModuleTemplateItem/accounting_module.xml
>> URL: http://svn.erp5.org/erp5/trunk/bt5/erp5_accounting/ModuleTemplateItem/accounting_module.xml?rev=19319&r1=19318&r2=19319&view=diff
>> ==============================================================================
>> --- erp5/trunk/bt5/erp5_accounting/ModuleTemplateItem/accounting_module.xml (original)
>> +++ erp5/trunk/bt5/erp5_accounting/ModuleTemplateItem/accounting_module.xml Thu Feb 14 19:17:43 2008
>> @@ -7,7 +7,6 @@
>>     <role>Assignor</role>
>>     <role>Associate</role>
>>     <role>Auditor</role>
>> -   <role>Author</role>
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> @@ -37,304 +36,309 @@
>>     <role>Assignor</role>
>>     <role>Associate</role>
>>     <role>Auditor</role>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Accelerated HTTP Cache Managers</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add BTreeFolder2s</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Browser Id Manager</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMF Action Icons Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMF Active Processs</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMF Caching Policy Managers</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMF Calendar Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMF Core Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMF Default Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMF Report Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMF Setup Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMF Sites</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMF Unique Id Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMFActivity Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMFCategory Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add CMFMailIn Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Configured CMF Sites</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Content Type Registrys</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Cookie Crumblers</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Database Methods</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Documents, Images, and Files</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5 Filesystem Formulator Forms</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5 Forms</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5 OOo Templates</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5 PDF Forms</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5 PDF Templates</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5 Publications</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5 Reports</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5 Sites</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5 Subscriptions</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5 Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5Catalog Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5Form Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5Subversion Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5SyncML Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ERP5Type Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ExtFiles</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ExtImages</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add External Methods</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Filesystem Directory Views</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Folders</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Formulator Forms</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Local File Systems</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add LocalContents</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add LocalFolders</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Localizers</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add MailHost objects</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add MessageCatalogs</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add MimetypesRegistry Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Page Templates</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Pluggable Index</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Plugin Registrys</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add PortalTransforms Tools</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Python Scripts</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add RAM Cache Managers</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ReStructuredText Documents</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Session Data Manager</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Site Roots</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Temporary Folder</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Transient Object Container</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add User Folders</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Virtual Host Monsters</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Vocabularies</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Z Gadfly Database Connections</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Z MySQL Database Connections</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Z MySQL Deferred Database Connections</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ZCatalogs</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ZMailIn Clients</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ZMailMessages</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add ZODB Mount Points</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add Zope Tutorials</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add portal content</name>
>> +   <role>Assignor</role>
>>     <role>Author</role>
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> -   <name>AccessContentsInformation</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Accelerated HTTP Cache Managers</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add BTreeFolder2s</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Browser Id Manager</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add CMF Action Icons Tools</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add CMF Active Processs</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add CMF Caching Policy Managers</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add CMF Calendar Tools</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add CMF Core Tools</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add CMF Default Tools</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add CMF Report Tools</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add CMF Setup Tools</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add CMF Sites</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add CMF Unique Id Tools</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add CMFActivity Tools</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add CMFCategory Tools</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add CMFMailIn Tools</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add Configured CMF Sites</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Content Type Registrys</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Cookie Crumblers</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Database Methods</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Documents, Images, and Files</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ERP5 Filesystem Formulator Forms</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ERP5 Forms</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add ERP5 OOo Templates</name>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add ERP5 PDF Forms</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ERP5 PDF Templates</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add ERP5 Publications</name>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add ERP5 Reports</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ERP5 Sites</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add ERP5 Subscriptions</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ERP5 Tools</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ERP5Catalog Tools</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ERP5Form Tools</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add ERP5Subversion Tools</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ERP5SyncML Tools</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ERP5Type Tools</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ExtFiles</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ExtImages</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add External Methods</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Filesystem Directory Views</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Folders</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Formulator Forms</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add LocalContents</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add LocalFolders</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Localizers</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add MailHost objects</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add MessageCatalogs</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Page Templates</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Photo Folders</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Photos</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Pluggable Index</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add Plugin Registrys</name>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add Portal ZSyncer Tools</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Python Scripts</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add RAM Cache Managers</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ReStructuredText Documents</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Session Data Manager</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Site Roots</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Temporary Folder</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Transient Object Container</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add User Folders</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Versions</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Virtual Host Monsters</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Vocabularies</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Z Gadfly Database Connections</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Z MySQL Database Connections</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add Z MySQL Database Deferred Connections</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ZCatalogs</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ZMailIn Clients</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ZMailMessages</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add ZODB Mount Points</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>Add ZSyncers</name>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add Zope Tutorials</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add portal content</name>
>> +   <name>Add portal events</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Add portal folders</name>
>>     <role>Assignor</role>
>>     <role>Author</role>
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> -   <name>Add portal events</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>> -   <name>Add portal folders</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>>     <name>Add portal member</name>
>>     <role>Manager</role>
>>    </permission>
>> @@ -383,6 +387,10 @@
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> +   <name>Change Local File System properties</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>>     <name>Change Lock Information</name>
>>     <role>Manager</role>
>>    </permission>
>> @@ -391,10 +399,6 @@
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> -   <name>Change Photo</name>
>> -   <role>Manager</role>
>> -  </permission>
>> -  <permission type='tuple'>
>>     <name>Change Python Scripts</name>
>>     <role>Manager</role>
>>    </permission>
>> @@ -430,8 +434,10 @@
>>     <name>Change configuration</name>
>>     <role>Manager</role>
>>    </permission>
>> -  <permission type='list'>
>> +  <permission type='tuple'>
>>     <name>Change local roles</name>
>> +   <role>Assignor</role>
>> +   <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>>     <name>Change permissions</name>
>> @@ -451,7 +457,10 @@
>>    </permission>
>>    <permission type='tuple'>
>>     <name>Copy or Move</name>
>> -   <role>Assignor</role>
>> +   <role>Assignee</role>
>> +   <role>Assignor</role>
>> +   <role>Associate</role>
>> +   <role>Auditor</role>
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> @@ -467,6 +476,10 @@
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> +   <name>Delete local files</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>>     <name>Delete objects</name>
>>     <role>Assignor</role>
>>     <role>Manager</role>
>> @@ -481,6 +494,10 @@
>>    </permission>
>>    <permission type='tuple'>
>>     <name>Edit ReStructuredText</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Edit target</name>
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> @@ -501,7 +518,6 @@
>>     <role>Assignor</role>
>>     <role>Associate</role>
>>     <role>Auditor</role>
>> -   <role>Author</role>
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> @@ -528,8 +544,13 @@
>>     <name>Manage Access Rules</name>
>>     <role>Manager</role>
>>    </permission>
>> -  <permission type='list'>
>> +  <permission type='tuple'>
>>     <name>Manage Groups</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Manage Selenium test cases</name>
>> +   <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>>     <name>Manage Transient Object Container</name>
>> @@ -560,6 +581,10 @@
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> +   <name>Manage local files</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>>     <name>Manage messages</name>
>>     <role>Manager</role>
>>    </permission>
>> @@ -593,6 +618,10 @@
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> +   <name>Overwrite local files</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>>     <name>Post mail to ZMailIn</name>
>>     <role>Manager</role>
>>    </permission>
>> @@ -620,8 +649,9 @@
>>     <name>Search ZCatalog</name>
>>     <role>Manager</role>
>>    </permission>
>> -  <permission type='list'>
>> +  <permission type='tuple'>
>>     <name>Search for principals</name>
>> +   <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>>     <name>Set own password</name>
>> @@ -648,11 +678,19 @@
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> +   <name>Upload local files</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>>     <name>Use Database Methods</name>
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>>     <name>Use Factories</name>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>Use external editor</name>
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> @@ -665,7 +703,10 @@
>>     <role>Assignor</role>
>>     <role>Associate</role>
>>     <role>Auditor</role>
>> -   <role>Author</role>
>> +   <role>Manager</role>
>> +  </permission>
>> +  <permission type='tuple'>
>> +   <name>View Directory Index</name>
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> @@ -674,7 +715,6 @@
>>     <role>Assignor</role>
>>     <role>Associate</role>
>>     <role>Auditor</role>
>> -   <role>Author</role>
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> @@ -683,7 +723,6 @@
>>    </permission>
>>    <permission type='tuple'>
>>     <name>View management screens</name>
>> -   <role>Assignor</role>
>>     <role>Manager</role>
>>    </permission>
>>    <permission type='tuple'>
>> @@ -697,15 +736,6 @@
>>    <permission type='tuple'>
>>     <name>WebDAV access</name>
>>     <role>Manager</role>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>ZSyncer: Use ZSyncer</name>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>ZopeProfiler: manage</name>
>> -  </permission>
>> -  <permission type='list'>
>> -   <name>ZopeProfiler: view</name>
>>    </permission>
>>   </permission_list>
>>   <portal_type>Accounting Transaction Module</portal_type>
>>
>> Modified: erp5/trunk/bt5/erp5_accounting/bt/change_log
>> URL: http://svn.erp5.org/erp5/trunk/bt5/erp5_accounting/bt/change_log?rev=19319&r1=19318&r2=19319&view=diff
>> ==============================================================================
>> --- erp5/trunk/bt5/erp5_accounting/bt/change_log (original)
>> +++ erp5/trunk/bt5/erp5_accounting/bt/change_log Thu Feb 14 19:17:43 2008
>> @@ -1,3 +1,6 @@
>> +2008-2-14 jerome
>> +* change permissions on account_module and accounting_module. Auditor role now have Copy or Move (it was missing). Note that the difference with the current version of Base_setDefaultSecurity is that Author role does *not* have View permission. Author creates, Auditor views. For normal cases you should give both roles to thoses users.
>> +
>>  2008-2-12 yusei
>>  * Fixed amount search bug.
>>  
>>
>> Modified: erp5/trunk/bt5/erp5_accounting/bt/revision
>> URL: http://svn.erp5.org/erp5/trunk/bt5/erp5_accounting/bt/revision?rev=19319&r1=19318&r2=19319&view=diff
>> ==============================================================================
>> --- erp5/trunk/bt5/erp5_accounting/bt/revision (original)
>> +++ erp5/trunk/bt5/erp5_accounting/bt/revision Thu Feb 14 19:17:43 2008
>> @@ -1,1 +1,1 @@
>> -600
>> +604
>>
>> _______________________________________________
>> Erp5-report mailing list
>> Erp5-report at erp5.org
>> http://mail.nexedi.com/mailman/listinfo/erp5-report
>>
> _______________________________________________
> Erp5-dev mailing list
> Erp5-dev at erp5.org
> http://mail.nexedi.com/mailman/listinfo/erp5-dev



More information about the Erp5-dev mailing list