Using plone.api.user.has_permission

1letter · May 22, 2017, 8:02am

Hi,
In the Docs it is not clear what should be the Value of Parameter "Permission"

If i define a permission via Generic Setup like so:

<!--  permission.zcml-->
<configure
    xmlns="http://namespaces.zope.org/zope"
    i18n_domain="my.addon">    

    <permission
        id="my.addon.ViewGroupInfoViewlet"
        title="my.addon: View GroupInfo Viewlet" />        

</configure>

Should i use the ID or the Title for the Parameter in the api method?

jaroel · May 22, 2017, 8:27am

Hi Jan,

That would be the title of the permission, the Zope2 permission name. ie 'View' not 'zope2.View'.
See also https://docs.plone.org/develop/plone.api/docs/user.html#check-user-permission

Have fun!
-Roel

mgraf · May 22, 2017, 8:27am

Title

github.com

plone/plone.api/blob/master/src/plone/api/tests/test_user.py#L560


def test_get_permissions_nonexistant_user(self):
    """Test get_permissions for a user that does not exist."""


    from plone.api.exc import UserNotFoundError
    with self.assertRaises(UserNotFoundError):
        api.user.get_permissions(username='ming')


def test_get_permissions_context(self):
    """Test get permissions on some context."""


    user = api.user.create(
        username='chuck',
        email='chuck@norris.org',
        password='secret',
        roles=[],
    )


    from plone.api.exc import InvalidParameterError
    with self.assertRaises(InvalidParameterError):
        api.user.get_permissions(
            username='chuck',

https://docs.plone.org/develop/plone.api/docs/user.html#check-user-permission
and - https://docs.plone.org/develop/plone/security/permission_lists.html#id1

1letter · May 22, 2017, 8:29am

Thnx!

tkimnguyen · May 22, 2017, 2:44pm

Could someone be so kind as to make a pull request to say this in the docs...?