Borg.localrole not working out of the box

zopyx · September 1, 2015, 9:02am

I am trying to get an role adapter running within an almost bare Plone 4.3 site on top of borg.localrole and this documentation:

http://docs.plone.org/develop/plone/security/dynamic_roles.html

rolemap.xml importered properly
adapter installed properly

During a standard Plone request I can not see any invocation of my own adapter nor any invocation of the borg.localerole default adapter.

'borg_localrole' plugin is registered and activated for ILocalRolesPlugin in acl_users...but no impact.

Is there some additional magic need for making borg.localrole actually work?

-aj

datakurre · September 1, 2015, 9:20am

It should work OOTB, but is called only for authenticated users.

zopyx · September 1, 2015, 9:44am

Loggined as root, don't see any invocations.

I grepped for ILocalRoleProvider through all installed eggs and found only some references in borg.localrole and plone.app.workflow.

-aj

datakurre · September 1, 2015, 9:58am

Not sure, if it affects that admin is defined in the root user folder. If you didn't find this already, try stepping:

github.com

plone/borg.localrole/blob/master/borg/localrole/workspace.py#L405


        return None
    return aq_inner(context)
#
# ILocalRolesPlugin implementation
#


def _getAdapters(self, obj):
    adapters = getAdapters((obj, ), ILocalRoleProvider)
    # this is sequence of tuples of the form (name, adapter),
    # we don't really care about the names
    return (a[1] for a in adapters)


def _parent_chain(self, obj):
    """Iterate over the containment chain, stopping if we hit a
    local role blocker"""
    while obj is not None:
        yield obj
        if getattr(obj, '__ac_local_roles_block__', None):
            return
        new = aq_parent(aq_inner(obj))
        # if the obj is a method we get the class

zopyx · September 1, 2015, 10:12am

getRolesInContext() is only invoked while creating a new Plone site but not for subsequent requests within this site.

-aj