Policies of the setup module
The policy functions of setup and their limitations, from $FunctionList in kernel/setup/module.php. In the administration they are chosen under Roles and policies; a policy on setup/* grants every function.
administrate
Checked by the views: maintenance, menu, session.
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'setup', 'administrate' );if fetch( 'user', 'has_access_to', hash( 'module', 'setup', 'function', 'administrate' ) )
...
/ifinstall
Checked by the views: init.
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'setup', 'install' );if fetch( 'user', 'has_access_to', hash( 'module', 'setup', 'function', 'install' ) )
...
/iflogs
Checked by the views: logs, logsaction, logsdigest, logsfeed, logshealth, menu.
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'setup', 'logs' );if fetch( 'user', 'has_access_to', hash( 'module', 'setup', 'function', 'logs' ) )
...
/ifmanagecache
Checked by the views: cache, cachetoolbar, menu, staticcachestream.
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'setup', 'managecache' );if fetch( 'user', 'has_access_to', hash( 'module', 'setup', 'function', 'managecache' ) )
...
/ifmanagecronjobs
Checked by the views: cronjobs, cronjobsstream, menu.
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'setup', 'managecronjobs' );if fetch( 'user', 'has_access_to', hash( 'module', 'setup', 'function', 'managecronjobs' ) )
...
/ifmanagelogs
Checked by the views: logsmanage.
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'setup', 'managelogs' );if fetch( 'user', 'has_access_to', hash( 'module', 'setup', 'function', 'managelogs' ) )
...
/ifpreload
Checked by the views: menu, preload, preloadjob, preloadstream.
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'setup', 'preload' );if fetch( 'user', 'has_access_to', hash( 'module', 'setup', 'function', 'preload' ) )
...
/ifsetup
Checked by the views: contentextension, datatype, designextension, extensions, handlerextension, kerneloverride, menu, menuconfig, moduleextension, moduletable, modulewizard, rad, radsurvey, reauth, settingsextension, settingstoolbar, systemupgrade, templatecreate, templateedit, templatelist, templateoperator, templateview, toolbar, toolbarlist, workflowevent.
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'setup', 'setup' );if fetch( 'user', 'has_access_to', hash( 'module', 'setup', 'function', 'setup' ) )
...
/ifsystem_info
Checked by the views: info, languages, menu, sitedata.
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'setup', 'system_info' );if fetch( 'user', 'has_access_to', hash( 'module', 'setup', 'function', 'system_info' ) )
...
/ifunmasklogs
No view of the module names it; code checks it (eZUser::hasAccessTo( 'setup', 'unmasklogs' ) or the user/has_access_to fetch).
No limitations: the policy is all or nothing.
// Give a role the policy (eZRole::appendPolicy( $module, $function, $limitations ))
$role = eZRole::fetchByName( 'Editor' );
$role->appendPolicy( 'setup', 'unmasklogs' );if fetch( 'user', 'has_access_to', hash( 'module', 'setup', 'function', 'unmasklogs' ) )
...
/ifRelated
Generated by ./console exp:help:examples from kernel/setup/module.php, kernel/classes/ezrole.php. Do not edit this page: change the source and generate again (how). Free documentation: GFDL 1.3 or later.