Plone paste permissions

Rotonen · September 3, 2018, 3:19pm

Some time ago, the paste permission was tied to 'Modify portal content', so we've monkey patched it to 'Add portal content' and left ourselves a pointer to the relevant Plone ticket.

https://dev.plone.org/ticket/9177

The ticket has bitrot in the meanwhile and I'm now wondering whether I could rip the monkey patch out already.

github.com

4teamwork/opengever.core/blob/21019907d730ce45849eeaf42733af446d5fa026/opengever/base/monkey/patches/paste_permission.py#L7


from opengever.base.monkey.patching import MonkeyPatch




class PatchDXContainerPastePermission(MonkeyPatch):
    """Change permission for manage_pasteObjects to "Add portal content"


    See https://dev.plone.org/ticket/9177
    XXX: Find a way to do this without patching __ac_permissions__ directly
    """


    def __call__(self):
        from Products.CMFCore.permissions import AddPortalContent


        from plone.dexterity.content import Container
        self.patch_class_security(
            Container, 'manage_pasteObjects', AddPortalContent)

Based on a mailing list discussion @seanupton might have PLIPped and PRd this into plone.dexterity for 4.3 - did this ever happen?

https://web.archive.org/web/20151023012935/https://dev.plone.org/ticket/13820

Seems like it could have gone into 5.0 by @vangheem, but did not spot relevant code anywhere so far.