10. Appendix A: Zope Core Permissions

This is a list of standard permissions included with Zope. It is a good idea to use these permissions when applicable with your Zope products, rather than creating new ones. A list of built-in Zope permissions are available in Zope source code: src/AccessControl/Permissions.py.

10.1. Core Permissions

• Access contents information – get “directory listing” info
• Add Accelerated HTTP Cache Managers – add HTTP Cache Manager objects
• Add Database Methods – add ZSQL Method objects
• Add Documents, Images, and Files – add DTML Method/Document objects, Image objects, and File objects
• Add External Methods – add External Method objects
• Add Folders – add Folder objects
• Add MailHost objects – add MailHost objects
• Add Python Scripts – Add Python Script objects
• Add RAM Cache Managers – Add RAM Cache manager objects
• Add Site Roots – add Site Root objects
• Add User Folders – add User Folder objects
• Add Versions – add Version objects
• Add Virtual Host Monsters – add Virtual Host Monster objects
• Add Vocabularies – add Vocabulary objects (ZCatalog-related)
• Add ZCatalogs – add ZCatalog objects
• Add Zope Tutorials – add Zope Tutorial objects
• Change DTML Documents – modify DTML Documents
• Change DTML Methods – modify DTML Methods
• Change Database Connections – change database connection objects
• Change Database Methods – change ZSQL method objects
• Change External Methods – change External Method objects
• Change Images and Files – change Image and File objects
• Change Python Scripts – change Python Script objects
• Change Versions – change Version objects
• Change bindings – change bindings (for Python Scripts)
• Change cache managers – change cache manager objects
• Change cache settings – change cache settings (cache mgr parameters)
• Change configuration – generic
• Change permissions – change permissions
• Change proxy roles – change proxy roles
• Create class instances – used for ZClass permission mappings
• Delete objects – delete objects
• Edit Factories – edit Factory objects (ZClass)
• FTP access – allow FTP access to this object
• Import/Export objects – export and import objects
• Join/leave Versions – join and leave Zope versions
• Manage Access Rules – manage access rule objects
• Manage Vocabulary – manage Vocabulary objects
• Manage Z Classes – Manage ZClass objects (in the control panel)
• Manage ZCatalog Entries – catalog and uncatalog objects
• Manage properties – manage properties of an object
• Manage users – manage Zope users
• Open/Close Database Connections – open and close database connections
• Query Vocabulary – query Vocabulary objects (ZCatalog-related)
• Save/discard Version changes – save or discard Zope version changes
• Search ZCatalog – search a ZCatalog instance
• Take ownership – take ownership of an object
• Test Database Connections – test database connection objects
• Undo changes – undo changes to the ZODB (e.g. use the Undo tab)
• Use Database Methods – use ZSQL methods
• Use Factories – use Factory objects (ZClass-related)
• Use mailhost services – use MailHost object services
• View – view or execute an object
• View History – view ZODB history of an object
• View management screens – view management screens related to an object