tigefa4u projects Trac

Fix diff href issue introduced by r4684, fixes #4682.

Fix bug in Milestone editing: `milestone.completed` can be `None` here.

PermissionPolicy: added `perm.has_any` and `perm.has_all`

PermissionPolicy: follow-up to r4700, changed my mind (again) about the `perm.require` semantic... now I think the code is self-explaining.

PermissionPolicy: improved debugging log for the permission checks

PermissionPolicy: the AuthzPolicy permission check was always returning an authoritative answer, even if no actual match was found in the authz_policy file. Now, the AuthzPolicy can be used before the !DefaultPermissionPolicy.

PermissionPolicy: this log.debug statement was failing when context.id contained unicode characters.

PermissionPolicy: changed the semantic of `perm.require(*actions)`

Now, the check passes if ''any'' of the listed actions is permitted.
This is because a `require` check for ''all'' actions can simply be done by a succession of `require()` calls.

The above is used for the `Attachment._render_list` check, where a LIST permission can also be used instead of the VIEW one in order to get access to the list of attachments (addresses #4240).

Also, the `PermissionCache.require` is now compatible again with old-style `req.perm.assert_permission('...')` checks.

Finally, the message corresponding to a `PermissionError` has been made more explicit.

PermissionPolicy: follow-up to r4666, forgot to rename occurrences of `self_href` to `resource_href` in the templates.

PermissionPolicy: stop using req.hdf in get_diff_options (this was triggering a call to the deprecated `PermissionCache.permissions()` method)