def group_membership_role_deleted(group_membership_role, event):
if group_membership_role.is_global:
prm = IPrincipalRoleMap(
get_group_context(group_membership_role.member.group))
prm.unsetRoleForPrincipal(
group_membership_role.role_id,
group_membership_role.member.user.login)
def group_membership_role_added(group_membership_role, event):
if group_membership_role.is_global:
prm = IPrincipalRoleMap(
get_group_context(group_membership_role.member.group))
prm.assignRoleToPrincipal(
group_membership_role.role_id,
group_membership_role.member.user.login)
def _do_save(self, data):
group_role_changed = False
prm = IPrincipalRoleMap(get_group_context(self.context))
if (data["group_role"] != self.context.group_role):
if (prm.getSetting(self.context.group_role,
self.context.principal_name) == Allow):
group_role_changed = True
unset_group_local_role(self.context)
formlib.form.applyChanges(self.context, self.form_fields, data)
if group_role_changed:
set_group_local_role(self.context)
notify(ObjectModifiedEvent(self.context))
def _do_save(self, data):
group_role_changed = False
prm = IPrincipalRoleMap(get_group_context(self.context))
if (data["group_role"] != self.context.group_role):
if (prm.getSetting(self.context.group_role,
self.context.principal_name) == Allow):
group_role_changed = True
unset_group_local_role(self.context)
formlib.form.applyChanges(self.context, self.form_fields, data)
if group_role_changed:
set_group_local_role(self.context)
notify(ObjectModifiedEvent(self.context))
def get_principal_roles(self, principal):
"""Returns roles associated with groups.
"""
session = Session()
roles = []
for group_id in principal.groups.keys():
result = session.query(domain.Group).filter(
domain.Group.group_principal_id == group_id).first()
if result:
roles.extend(
get_context_roles(get_group_context(result), principal))
return roles
def get_principal_roles(self, principal):
"""Returns roles associated with groups.
"""
session = Session()
roles = []
for group_id in principal.groups.keys():
result = session.query(domain.Group).filter(
domain.Group.group_principal_id == group_id).first()
if result:
roles.extend(get_context_roles(
get_group_context(result), principal))
return roles
def title_deleted(membership, event):
prm = IPrincipalRoleMap(get_group_context(title.title_type.group))
prm.unsetRoleForPrincipal(title.title_type.role_id,
title.member.user.login)
def title_created(title, event):
prm = IPrincipalRoleMap(get_group_context(title.title_type.group))
prm.assignRoleToPrincipal(title.title_type.role_id,
title.member.user.login)
def title_deleted(membership, event):
prm = IPrincipalRoleMap(get_group_context(title.title_type.group))
prm.unsetRoleForPrincipal(title.title_type.role_id, title.member.user.login)
def title_created(title, event):
prm = IPrincipalRoleMap(get_group_context(title.title_type.group))
prm.assignRoleToPrincipal(title.title_type.role_id, title.member.user.login)
def group_membership_role_added(group_membership_role, event):
if group_membership_role.is_global:
prm = IPrincipalRoleMap(get_group_context(group_membership_role.member.group))
prm.assignRoleToPrincipal(group_membership_role.role_id, group_membership_role.member.user.login)
def group_membership_role_deleted(group_membership_role, event):
if group_membership_role.is_global:
prm = IPrincipalRoleMap(get_group_context(group_membership_role.member.group))
prm.unsetRoleForPrincipal(group_membership_role.role_id, group_membership_role.member.user.login)
