Grant/revoke a permission to a role in a particular context

[zupo]

Quoting optilude: "It's a fairly common thing to want to do, especially in bootstrapping/setup code and tests. And, the underlying API is awkward to use."

Proposals for method names and parameters they should accept?

[zupo]

Let's have:

• api.user.grant_role()
• api.user.revoke_role()
• api.group.grant_role()
• api.group.revoke_role()

They all have an option parameter context which makes these methods grant/revoke local instead of global roles.

[esartor]

The role branch was created to handle this issue. Also, instead of a context parameter, we should use what is decided in #34

[esartor]

Ok, so the right branch is issue_13

[ericof]

I would suggest to use all methods in the plural:

• api.user.grant_roles(roles=[], username=None, user=None, obj=None)
• api.user.revoke_roles(roles=[], username=None, user=None, obj=None)
• api.group.grant_roles(roles=[], groupname=None, group=None, obj=None)
• api.group.revoke_roles(roles=[], groupname=None, group=None, obj=None)

[adamcheasley]

api.user.grant_roles and api.user.revoke_roles has been implemented in the ploneconf2012 branch. More work needed.

[xiru]

IMHO, this issue could be closed. AFAIK, all needed code is already merged on master, developed during plone conference sprint.