[z3-five] Security and Five

[Sidnei da Silva]

I've checked in the work i've been doing on security decls in
zcml. However, I've tried to use the five:content directive to protect
views, and found out that it doesn't quite work because when the page
directive is used, a metaclass is created, and the security decls
didnt took effect yet because they are processed later.

It seems to me that the right way to handle this is to have a
<require> and <allow> subdirectives to the <five:page> directive
instead. I don't remember from the top of my head how security in
views is handled.

If I am correct, doing security decls in python as it was done in
FiveViewsDemo before my changes didnt work either. Martijn, can u confirm?

For content, the security decls in zcml should be working just fine as
there's no metaclass involved.

Thoughts?

-- 
Sidnei da Silva <sidnei at awkly.org>
http://awkly.org - dreamcatching :: making your dreams come true
http://www.enfoldsystems.com
http://plone.org/about/team#dreamcatcher

If you have a procedure with 10 parameters, you probably missed some.