From 2466f6eaa2246598dc6cb3c962364773eb4cc64a Mon Sep 17 00:00:00 2001
From: Chris McDonough <chrism@agendaless.com>
Date: Wed, 16 Jul 2008 10:32:08 +0000
Subject: Add security.

---
 repoze/bfg/zcml.py | 28 ++++++++++++++++------------
 1 file changed, 16 insertions(+), 12 deletions(-)

(limited to 'repoze/bfg/zcml.py')

diff --git a/repoze/bfg/zcml.py b/repoze/bfg/zcml.py
index 1133b3d0b..309d9b5c5 100644
--- a/repoze/bfg/zcml.py
+++ b/repoze/bfg/zcml.py
@@ -11,15 +11,17 @@ from zope.interface import implements
 from zope.interface import classProvides
 
 from zope.schema import TextLine
-from zope.security.zcml import Permission
 
 from repoze.bfg.interfaces import IRequest
 from repoze.bfg.interfaces import IViewFactory
+from repoze.bfg.interfaces import IViewPermission
 from repoze.bfg.interfaces import IView
 
 from repoze.bfg.template import Z3CPTTemplateFactory
 from repoze.bfg.template import render_template
 
+from repoze.bfg.security import ViewPermissionFactory
+
 class TemplateOnlyView(object):
     implements(IView)
     classProvides(IViewFactory)
@@ -58,7 +60,7 @@ class TemplateOnlyViewFactory(object):
         return factory
         
 def view(_context,
-         permission,
+         permission=None,
          for_=None,
          factory=None,
          name="",
@@ -95,6 +97,16 @@ def view(_context,
             args = ('', for_)
             )
 
+    if permission:
+        pfactory = ViewPermissionFactory(permission)
+        _context.action(
+            discriminator = ('permission', for_,name, IRequest,IViewPermission),
+            callable = handler,
+            args = ('registerAdapter',
+                    pfactory, (for_, IRequest), IViewPermission, name,
+                    _context.info),
+            )
+
     _context.action(
         discriminator = ('view', for_, name, IRequest, IViewFactory),
         callable = handler,
@@ -104,23 +116,15 @@ def view(_context,
         )
 
 class IViewDirective(Interface):
-    """
-    The page directive is used to create views that provide a single
-    url or page.
-
-    The page directive creates a new view class from a given template
-    and/or class and registers it.
-    """
-
     for_ = GlobalObject(
         title=u"The interface or class this view is for.",
         required=False
         )
 
-    permission = Permission(
+    permission = TextLine(
         title=u"Permission",
         description=u"The permission needed to use the view.",
-        required=True
+        required=False
         )
 
     factory = GlobalObject(
-- 
cgit v1.2.3