Package: borg.project
Overviewborg.project adds the ability to create project workspaces with local workflow
policies and local roles.borg.project is known to work with Plone 3.2, Plone 3.3 and the latest
Plone 4.0 Beta.One can use it to create a workspace for projects that only certain members
can access and modify and where you can decide to use other workflows for
the content than in the rest of the portal.
All these settings are configured centrally on the project workspace
itself.Change historyChangelog for borg.project1.1rc9 (unreleased)i18n:domain=plone for workflow, updated de translations.You need to delete
the borg workflows and reinstall, if you want to benefit of these
translations. As usual, backups before!
[chaoflow]correct profile to show up in plone add-ons panel
[chaoflow]ignore acquired workflow policy, enable nested borg.projects
[chaoflow]1.1rc8 (2010-07-22)Plone 4 compatibility
[chaoflow, pbauer]Added automatic updates of security indexes in catalog when project
memberships change
[do3cc]1.1rc7 (2010-02-04)Catch and handle an exception that occurs during copy&paste of projects
[do3cc]1.1rc6 (2010-02-03)Change permission restrictions for a number of methods on projects, so that
copy&paste works
[do3cc]1.1rc5 (2009-10-31)Brown bag release, too new svn, too few files
[do3cc]1.1rc4 (2009-10-31)bugfix, wrong workflow state in transition declaration
[jessesnyder]Added i18n structure and german translations
[redcor]Added default values for some fields and tests
[jcbrand]Fixed a bug with returning local roles
[do3cc]Moved code around and added buildout.cfgs for testing against a
number of different plone versions
[do3cc]1.1rc3 (13.02.2008)Initial package structure.
[zopeskel]Extracted borg.project out of borg
[optilude]Added tests and documentation
[optilude]Detailed Documentationborg.project : Collaborative workspaces for the massesby Martin Aspeli <optilude@gmx.net>This product is based on b-org, and only runs on Plone 3. It depends on
the borg.localrole package.Place these packages in your PYTHONPATH or install them into a buildout or
a workingenv, and then use Plone’s Add-on product configuration to install.With borg.project, you can create a folder in the portal with:a number of users assigned as managers, given a local Manager rolea number of users assigned as team members, given a local TeamMember rolea custom workflow, as specified by a CMFPlacefulWorkflow policyan explicitly managed list of addable content typesThe default version of the project workflow contains states for content
being published, visible only to team members, or completely private.Setting up a new projectFirst, we need to add a few members>>> from Products.CMFCore.utils import getToolByName
>>> membership = getToolByName(self.portal, 'portal_membership')>>> membership.addMember('member1', 'secret', ('Member',), ())
>>> membership.addMember('member2', 'secret', ('Member',), ())
>>> membership.addMember('member3', 'secret', ('Member',), ())
>>> membership.addMember('member4', 'secret', ('Member',), ())
>>> membership.addMember('member5', 'secret', ('Member',), ())
>>> membership.addMember('member6', 'secret', ('Member',), ())and a group, with a single member>>> groups = getToolByName(self.portal, 'portal_groups')
>>> _ = groups.addGroup('group1')
>>> _ = groups.addPrincipalToGroup('member4', 'group1')We need to be the a manager to create the project workspace.>>> self.loginAsPortalOwner()The UberMultiSelectionWidget in plone/app/form/widgets requires that the
addform’s schema.List fields each has a  default value that is iterable.
(i.e list, tuple, set etc.)>>> from zope.publisher.browser import TestRequest
>>> from borg.project.browser.project import ProjectAddForm
>>> from borg.project.interfaces import IProject
>>> request = TestRequest()
>>> addform = ProjectAddForm(IProject, request)
>>> addform.form_fields.get('managers').field.default
[]
>>> addform.form_fields.get('members').field.default
[]
>>> addform.form_fields.get('groups').field.default
[]We can now create the project object. Will simulate what happens in the
add form here, by setting the relevant properties on a newly created object,
calling _finishConstruction() on its FTI to finalise workflow creation, and
send the IObjectCreatedEvent event.Notice how managers and members are lists of user ids.>>> from zope.component import createObject
>>> project1 = createObject(u"borg.project.Project")>>> project1.id = 'project1'
>>> project1.title = "Project 1"
>>> project1.description = "A first project"
>>> project1.managers = ('member1', 'member2',)
>>> project1.members = ('member2', 'member3',)
>>> project1.groups = ('group1',)Workflow policies are obtained from a vocabulary. The default vocabulary
simply returns a particular policy which is installed at setup time.>>> from zope.schema.interfaces import IVocabularyFactory
>>> from zope.component import getUtility
>>> policies_factory = getUtility(IVocabularyFactory, name=u"borg.project.WorkflowPolicies")
>>> policies_vocabulary = policies_factory(self.portal)
>>> workflow_policy = list(policies_vocabulary)[0]
>>> workflow_policy.value
'borg_project_placeful_workflow'>>> project1.workflow_policy = workflow_policy.valueAddable types are from another vocabulary, which should include any
globally allowed types.>>> types_factory = getUtility(IVocabularyFactory, name=u"borg.project.AddableTypes")
>>> types_vocabulary = types_factory(self.portal)
>>> 'Document' in [v.value for v in types_vocabulary]
True
>>> 'Topic' in [v.value for v in types_vocabulary]
TrueThere is also a method to get default values for the addable types field.
This gives back all globally allowed types with Owner in the list of roles
for their add permissions.>>> from borg.project.utils import default_addable_types
>>> default_addable = default_addable_types(self.portal)
>>> 'Document' in default_addable
True
>>> 'Large Plone Folder' in default_addable
False>>> project1.addable_types = ('Document', 'Folder',)Now let us finish construction and fire those events.>>> from zope.event import notify
>>> from zope.lifecycleevent import ObjectCreatedEvent
>>> try:
...     from zope.container.contained import ObjectAddedEvent, notifyContainerModified
... except ImportError:
...     pass # We are in Plone3 land
>>> notify(ObjectCreatedEvent(project1))>>> new_id = self.portal._setObject('project1', project1)
>>> project1 = self.portal._getOb(new_id)
>>> if hasattr(project1.getTypeInfo(), '_finishConstruction'):
...     _ = project1.getTypeInfo()._finishConstruction(project1)With this, the project is properly constructed. Let us verify that the
local policy is in place.>>> placeful_workflow = getToolByName(self.portal, 'portal_placeful_workflow')
>>> placeful_workflow.getWorkflowPolicyConfig(project1).getPolicyBelowId()
'borg_project_placeful_workflow'And that our members have the appropriate roles>>> acl_users = getToolByName(self.portal, 'acl_users')This user is a manager only.>>> member1 = acl_users.getUserById('member1')
>>> 'Manager' in member1.getRolesInContext(project1)
True
>>> 'TeamMember' in member1.getRolesInContext(project1)
FalseThis user is a manager and a member.>>> member2 = acl_users.getUserById('member2')
>>> 'Manager' in member2.getRolesInContext(project1)
True
>>> 'TeamMember' in member2.getRolesInContext(project1)
TrueThis user is a member only.>>> member3 = acl_users.getUserById('member3')
>>> 'Manager' in member3.getRolesInContext(project1)
False
>>> 'TeamMember' in member3.getRolesInContext(project1)
TrueThis user is associated by way of the group.>>> member4 = acl_users.getUserById('member4')
>>> 'Manager' in member4.getRolesInContext(project1)
False
>>> 'TeamMember' in member4.getRolesInContext(project1)
TrueThis user has no association with the group.>>> member5 = acl_users.getUserById('member5')
>>> 'Manager' in member5.getRolesInContext(project1)
False
>>> 'TeamMember' in member5.getRolesInContext(project1)
FalseFinally, let us verify that the permission management has worked. The key
here is that users with the TeamMember role should be able to add the types
we explicitly defined, but no other types.The two managers can add other content, though.>>> self.login('member1')
>>> project1.invokeFactory('Document', 'd1')
'd1'
>>> project1.invokeFactory('Image', 'i1')
'i1'>>> self.login('member2')
>>> project1.invokeFactory('Document', 'd2')
'd2'
>>> project1.invokeFactory('Image', 'i2')
'i2'>>> self.login('member3')
>>> project1.invokeFactory('Document', 'd3')
'd3'
>>> project1.invokeFactory('Image', 'i3')
Traceback (most recent call last):
...
Unauthorized: Cannot create Image>>> self.login('member4')
>>> project1.invokeFactory('Document', 'd4')
'd4'
>>> project1.invokeFactory('Image', 'i4')
Traceback (most recent call last):
...
Unauthorized: Cannot create ImageBut of course, a user who is not a team member can’t add anything.>>> self.login('member5')
>>> project1.invokeFactory('Document', 'd5')
Traceback (most recent call last):
...
Unauthorized: Cannot create Document
>>> project1.invokeFactory('Image', 'i5')
Traceback (most recent call last):
...
Unauthorized: Cannot create ImageUsers who get added later should be able to see documents immediately.
That does not always work out of the box with local roles>>> from zope.lifecycleevent import ObjectModifiedEvent
>>> project1.members = project1.members + ('member6',)
>>> self.login('member6')
>>> catalog = getToolByName(self.portal, 'portal_catalog')
>>> len(catalog(id='d1'))
0OK, this was not the real test yet, if it ever breaks it means an event
handler can be removed.
Here is the test:>>> notify(ObjectModifiedEvent(project1))
>>> len(catalog(id='d1'))
1ContributorsMartin Aspeli [optilude]Patrick Gerken [do3cc]Florian Friesdorf [chaoflow]