Security

Zope provides various built-in security facilities

• User - role - permission three layer security model
• Security declarations in ZCML for views, adapters, etc.
• RestrictedPython to evaluate sandboxed code

• Permissions
  • Introduction
  • Checking permission manually
  • Bypassing permission checks
  • Catching Unauthorized
  • Creating permissions
  • Assigning permissions to users (roles)
• Available permissions
• Custom permissions
  • Define Zope 2 permissions in python code
  • Make the permissions available as a Zope 3 permissions
  • Define both Zope 2 and Zope3 permissions in one Step in ZCML
• Securing your code
  • Old style vs. new style
  • Declaring view security
• Local roles
  • Local role caching
  • Setting local role
  • Getting local roles
  • Deleting local roles
  • Debugging
  • Other
• Dynamic roles
• Sandboxing
  • Restricted execution special cases
  • Testing RestrictedPython
  • Other references