• Results:
• Recommendations

Migration Script¶

I wrote the following script (not the most beautiful):

types_tool = context.portal_types
  if ptype:
    ptype = types_tool[ptype]
    ptype.updateRoleMapping()
    return

  portal = context.getPortalObject()
  for ptype in types_tool.objectIds():
    portal.person_module.activate(activity='SQLQueue').ERP5Site_updateRoleMapping(ptype=ptype)

  return "done"

Results:¶

• Worked.
• I had to remove some useless reindexObject and immediateReindexObject activities.
• I wonder why activate() does not work on a portal object (too bad).
• In my opinion, upgrading securities in an ERP5 Site should be a bit easier.

Recommendations¶

• Make sure that the updateRoleMapping does not generate too many reindexing activities (1 reindexObject per object is probably enough for a mass upgrade). Or maybe even better, prevent reindexing in such a case. Or maybe better, write a reindexing script such as ERP5Site_reindexAll which also upgrades security (and does not generate more reindexing messages).
• make reindexing of large folders a bit better (ie. by splitting the reindexing on each component of the folder) - I already committed this

In the end, I would like to be able to massively upgrade the security of a site without pain and in real time.

Related Articles¶

• Guidelines | Configuration And Project Business Templates Must Include Roles For Group, Site And Function
• Guidelines | Define Module Author And Auditor In Roles Tab Based On Use Cases
• Guidelines | Define The Roles Allowed To Excecute A Transition
• Guidelines | Generic Business Templates Must Have Security Roles Set On States And Transitions
• Guidelines | Include Module Base Categories In Business Template
• Guidelines | Include Module Local Roles In Business Template
• Guidelines | Inside The Roles Tab, Assignor, Assignee, Associate And Auditor Must Be Defined
• Guidelines | Python Class Method Should Have Security Declaration
• Guidelines | Unset Acquire Local Roles On Document Portal Type Configuration If Applicable
• HowTo | Set User Access Permissions
• HowTo | Understand ERP5 Security
• HowTo | Use Multiple Users Simultaneously
• HowTo | Use Security Based On Role, Group And Function
• Technical Note | Authentication Infrastructure
• Technical Note | Catalog Roles
• Technical Note | System Backup
• Technical Note | Upgrading Security
• Technical Note | User Permisson Troubleshooting