Skip to main content

Modified policy for deleting objects in Plone

Project description

Introduction

Change some parts of Plone and make possible for users to delete contents not so easily.

The Plone behaviour

Plone (Zope) base the power to delete object looking for the “Delete objects” permission on containers. This mean that normally users that can delete contents inside a folder can delete all contents. In our experience, no-one want a workflow that make possibile to users that can’t modify a content, to be able to delete it.

This product change the Plone user interface behaviour, hiding the possibility to delete contents when you can’t modify it.

How Plone works after the installation

For deleting a content you must have:

  • Delete objects” permission on the parent folder
  • Delete objects” permission on the content itself
  • Beeing able to modify the content (all the contents) you want to delete

Security

This product is mainly targeted on Plone UI and it monkeypatch the low level permission for cutting documents.

If you run a task, a 3rd party product or whatever piece of code that delete objects, this will run with the default Plone permissions (so, only checking the “Delete objects” on containers).

Alternatives

A very similar product (probably better maintained): collective.deletepermission

Authors

This product was developed by RedTurtle Technology team.

RedTurtle Technology Site

Changelog

2.1.1 (2013-12-16)

  • Do not handle manage_pasteObjects anymore. It is a good fix for Plone, but this was the wrong product (we only care about deletion here) [keul]

2.1.0 (Unreleased)

  • Fixed low level Archetypes permissions for manage_cutObjects and manage_pasteObjects [fdelia]

2.0.0 (Unreleased)

  • Plone 4.1 compatibility [fdelia]

1.1.0 (2010-12-06)

1.0.5 (2010-07-17)

  • added z3c.autoinclude [keul]

1.0.4 (2010-06-03)

  • customized the script of cut from folder_contents. Now performs the check that the user can modify the objects who wants to cut. [mirco]

1.0.3 (2010-04-15)

  • Release on RedTurtle pypi

1.0.2

  • Cleaned the egg format

1.0.1

  • Bug fixed: the delete object menu voice was always available.
  • Added policy for cut menu voice, like the delete ones you can cut only if you can modify.

1.0.0 - Unreleased

  • Initial release

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Files for redturtle.deletepolicy, version 2.1.1
Filename, size File type Python version Upload date Hashes
Filename, size redturtle.deletepolicy-2.1.1.zip (21.9 kB) File type Source Python version None Upload date Hashes View hashes

Supported by

Elastic Elastic Search Pingdom Pingdom Monitoring Google Google BigQuery Sentry Sentry Error logging AWS AWS Cloud computing DataDog DataDog Monitoring Fastly Fastly CDN SignalFx SignalFx Supporter DigiCert DigiCert EV certificate StatusPage StatusPage Status page