Security framework for Zope2.
AccessControl provides a general security framework for use in Zope2.
For changes before version 3.0, see HISTORY.rst.
Add support for Python 3.4 up to 3.6. (only Python implementation)
Depend on RestrictedPython >= 4.0.
Use @implementer class decorator.
Remove AccessControl.Permission.name_trans to ease Python 3 migration. Use AccessControl.Permission.getPermissionIdentifier() instead.
Extract .AuthEncoding to its own package for reuse.
Declare missing dependency on BTrees.
Modernised C code in preparation of porting to Python 3.
#16: Fixed permission handling by avoiding column and row numbers as identifiers for permissions and roles.
Avoid acquiring access from module wrapped by SecurityInfo._ModuleSecurityInfo. See: https://github.com/zopefoundation/AccessControl/issues/12
Harden test fix for machines that do not define localhost.
Test fix for machines that do not define localhost.
GitHub #6: Do not pass SecurityInfo instance itself to declarePublic/declarePrivate when using the public/private decorator. This fixes Conflicting security declarations warnings on Zope startup.
LP #1248529: Leave existing security manager in place inside RoleManager.manage_getUserRolesAndPermissions.
LP #1169923: ensure initialization of shared ImplPython state (used by ImplC) when using the “C” security policy. Thanks to Arnaud Fontaine for the patch.
Remove long-deprecated ‘Shared’ roles support (pre-dates Zope, never used by Zope itself)
Prevent infinite loop when looking up local roles in an acquisition chain with cycles.
LP #1071067: Use a stronger random number generator and a constant time comparison function.
LP #966101: Recognize special zope2.Private permission in ZCML role directive.
LP #1047318: Tighten import restrictions for restricted code.
Fix a bug in ZopeSecurityPolicy.py. Global variable rolesForPermissionOn could be overridden if __role__ had custom rolesForPermissionOn.
Add Anonymous as a default role for Public permission.
Fix tests under Python 2.6.
Added decorators for public, private and protected security declarations.
Update tests to take advantage of automatic test suite discovery.
Release history Release notifications | RSS feed
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Hashes for AccessControl-4.0a5-py2.7-win-amd64.egg
Hashes for AccessControl-4.0a5-py2.7-win32.egg