Policies of the content module
The policy functions of content and their limitations, from $FunctionList in kernel/content/module.php. In the administration they are chosen under Roles and policies; a policy on content/* grants every function.
Some functions also take one limitation per object state group of the site, named StateGroup_<group identifier> (eZContentObjectStateGroup::limitations(), read from the database, so not listed below).
bookmark
Checked by the views: bookmark.
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'bookmark' );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'bookmark' ) )
...
/ifcleantrash
No view of the module names it; code checks it (eZUser::hasAccessTo( 'content', 'cleantrash' ) or the user/has_access_to fetch).
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'cleantrash' );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'cleantrash' ) )
...
/ifcreate
Checked by the views: copysubtree, edit, upload.
| Limitation | Values come from |
|---|---|
| Class | eZContentClass::fetchList() |
| Language | eZContentLanguage::fetchLimitationList() |
| Node | |
| ParentClass | eZContentClass::fetchList() |
| ParentDepth | eZContentObjectTreeNode::parentDepthLimitationList() |
| ParentGroup | fixed: Self (1) |
| ParentOwner | fixed: Self (1), Self or anonymous users per HTTP session (2) |
| Section | eZSection::fetchList() |
| Subtree |
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'create', array( 'Class' => array( /* values */ ) ) );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'create' ) )
...
/ifdashboard
Checked by the views: dashboard.
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'dashboard' );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'dashboard' ) )
...
/ifdiff
No view of the module names it; code checks it (eZUser::hasAccessTo( 'content', 'diff' ) or the user/has_access_to fetch).
| Limitation | Values come from |
|---|---|
| Class | eZContentClass::fetchList() |
| Node | |
| Owner | fixed: Self (1) |
| Section | eZSection::fetchList() |
| Subtree |
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'diff', array( 'Class' => array( /* values */ ) ) );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'diff' ) )
...
/ifedit
Checked by the views: draft, edit, history, move, multiedit, queued, removeassignment, removenode, urlalias.
| Limitation | Values come from |
|---|---|
| Class | eZContentClass::fetchList() |
| Group | fixed: Self (1) |
| Language | eZContentLanguage::fetchLimitationList() |
| Node | |
| Owner | fixed: Self (1), Self or anonymous users per HTTP session (2) |
| Section | eZSection::fetchList() |
| Subtree |
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'edit', array( 'Class' => array( /* values */ ) ) );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'edit' ) )
...
/ifhide
Checked by the views: hide.
| Limitation | Values come from |
|---|---|
| Class | eZContentClass::fetchList() |
| Group | fixed: Self (1) |
| Language | eZContentLanguage::fetchLimitationList() |
| Node | |
| Owner | fixed: Self (1), Self or anonymous users per HTTP session (2) |
| Section | eZSection::fetchList() |
| Subtree |
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'hide', array( 'Class' => array( /* values */ ) ) );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'hide' ) )
...
/ifjobs
No view of the module names it; code checks it (eZUser::hasAccessTo( 'content', 'jobs' ) or the user/has_access_to fetch).
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'jobs' );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'jobs' ) )
...
/ifmanage_locations
No view of the module names it; code checks it (eZUser::hasAccessTo( 'content', 'manage_locations' ) or the user/has_access_to fetch).
| Limitation | Values come from |
|---|---|
| Class | eZContentClass::fetchList() |
| Owner | fixed: Self (1) |
| Section | eZSection::fetchList() |
| Subtree |
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'manage_locations', array( 'Class' => array( /* values */ ) ) );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'manage_locations' ) )
...
/ifmove
No view of the module names it; code checks it (eZUser::hasAccessTo( 'content', 'move' ) or the user/has_access_to fetch).
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'move' );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'move' ) )
...
/ifChecked by the views: pdf.
| Limitation | Values come from |
|---|---|
| Class | eZContentClass::fetchList() |
| Node | |
| Owner | fixed: Self (1) |
| Section | eZSection::fetchList() |
| Subtree |
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'pdf', array( 'Class' => array( /* values */ ) ) );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'pdf' ) )
...
/ifpendinglist
Checked by the views: pendinglist.
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'pendinglist' );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'pendinglist' ) )
...
/ifpublish
No view of the module names it; code checks it (eZUser::hasAccessTo( 'content', 'publish' ) or the user/has_access_to fetch).
| Limitation | Values come from |
|---|---|
| Class | eZContentClass::fetchList() |
| Group | fixed: Self (1) |
| Language | eZContentLanguage::fetchLimitationList() |
| Node | |
| Owner | fixed: Self (1), Self or anonymous users per HTTP session (2) |
| Section | eZSection::fetchList() |
| Subtree |
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'publish', array( 'Class' => array( /* values */ ) ) );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'publish' ) )
...
/ifpublish_without_notification
No view of the module names it; code checks it (eZUser::hasAccessTo( 'content', 'publish_without_notification' ) or the user/has_access_to fetch).
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'publish_without_notification' );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'publish_without_notification' ) )
...
/ifread
Checked by the views: action, advancedsearch, browse, collectedinfo, collectinformation, copy, download, history, job, jobs, keyword, new, removeeditversion, removemediaobject, removeobject, removeuserobject, search, sharedpreview, sitesuggest, subitemsexport, suggest, tipafriend, translation, treemenu, view.
| Limitation | Values come from |
|---|---|
| Class | eZContentClass::fetchList() |
| Group | fixed: Self (1) |
| Node | |
| Owner | fixed: Self (1) |
| Section | eZSection::fetchList() |
| Subtree |
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'read', array( 'Class' => array( /* values */ ) ) );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'read' ) )
...
/ifremove
No view of the module names it; code checks it (eZUser::hasAccessTo( 'content', 'remove' ) or the user/has_access_to fetch).
| Limitation | Values come from |
|---|---|
| Class | eZContentClass::fetchList() |
| Node | |
| Owner | fixed: Self (1) |
| Section | eZSection::fetchList() |
| Subtree |
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'remove', array( 'Class' => array( /* values */ ) ) );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'remove' ) )
...
/ifrestore
Checked by the views: restore, trash.
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'restore' );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'restore' ) )
...
/ifreverserelatedlist
Checked by the views: reverserelatedlist.
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'reverserelatedlist' );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'reverserelatedlist' ) )
...
/iftipafriend
Checked by the views: tipafriend.
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'tipafriend' );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'tipafriend' ) )
...
/iftranslate
No view of the module names it; code checks it (eZUser::hasAccessTo( 'content', 'translate' ) or the user/has_access_to fetch).
| Limitation | Values come from |
|---|---|
| Class | eZContentClass::fetchList() |
| Language | eZContentLanguage::fetchLimitationList() |
| Node | |
| Owner | fixed: Self (1) |
| Section | eZSection::fetchList() |
| Subtree |
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'translate', array( 'Class' => array( /* values */ ) ) );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'translate' ) )
...
/iftranslations
Checked by the views: translations.
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'translations' );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'translations' ) )
...
/ifurltranslator
Checked by the views: urlexport, urlredirects, urltranslator, urlwildcards.
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'urltranslator' );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'urltranslator' ) )
...
/ifurltranslator_import
Checked by the views: urlimport, urlimporthistory.
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'urltranslator_import' );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'urltranslator_import' ) )
...
/ifversionread
Checked by the views: versionview.
| Limitation | Values come from |
|---|---|
| Class | eZContentClass::fetchList() |
| Node | |
| Owner | fixed: Self (1) |
| Section | eZSection::fetchList() |
| Status | eZContentObjectVersion::statusList() |
| Subtree |
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'versionread', array( 'Class' => array( /* values */ ) ) );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'versionread' ) )
...
/ifversionremove
No view of the module names it; code checks it (eZUser::hasAccessTo( 'content', 'versionremove' ) or the user/has_access_to fetch).
| Limitation | Values come from |
|---|---|
| Class | eZContentClass::fetchList() |
| Node | |
| Owner | fixed: Self (1) |
| Section | eZSection::fetchList() |
| Status | eZContentObjectVersion::statusList() |
| Subtree |
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'versionremove', array( 'Class' => array( /* values */ ) ) );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'versionremove' ) )
...
/ifview_embed
No view of the module names it; code checks it (eZUser::hasAccessTo( 'content', 'view_embed' ) or the user/has_access_to fetch).
| Limitation | Values come from |
|---|---|
| Class | eZContentClass::fetchList() |
| Node | |
| Owner | fixed: Self (1) |
| Section | eZSection::fetchList() |
| Subtree |
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'view_embed', array( 'Class' => array( /* values */ ) ) );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'view_embed' ) )
...
/ifview_system_url
No view of the module names it; code checks it (eZUser::hasAccessTo( 'content', 'view_system_url' ) or the user/has_access_to fetch).
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'content', 'view_system_url' );if fetch( 'user', 'has_access_to', hash( 'module', 'content', 'function', 'view_system_url' ) )
...
/ifRelated
Generated by ./console exp:help:examples from kernel/content/module.php, kernel/classes/ezrole.php. Do not edit this page: change the source and generate again (how). Free documentation: GFDL 1.3 or later.