web/hosts/issues dbinit.py,1.7,1.8

Update of /cvs/fresco/web/hosts/issues
In directory purcel:/tmp/cvs-serv15619

Modified Files:
	dbinit.py 
Log Message:
Played with the permissions once more:

* Developers should now be able to comment on milestones, add themselves to
  nosy lists there, etc.
* You need to be a developer to change certain settings on a bug. Going round
  the webinterface shouldn't work anymore.
* Only developers are allowed to modify tasks.
* Do some sanity checks on all bugs/tasks/milestones before commiting them
  to the DB (and reject invalid changes)


Index: dbinit.py
===================================================================
RCS file: /cvs/fresco/web/hosts/issues/dbinit.py,v
retrieving revision 1.7
retrieving revision 1.8
diff -u -d -r1.7 -r1.8
--- dbinit.py	21 Aug 2003 16:33:05 -0000	1.7
+++ dbinit.py	25 Aug 2003 16:32:12 -0000	1.8
@@ -159,7 +159,7 @@
     # edit permissions
     for cl in 'bug', 'file', 'msg', 'query':
         p = db.security.getPermission('Edit', cl)
-        for u in 'User', 'Developer', 'Coordinator':
+        for u in 'User', 'Developer':
             db.security.addPermissionToRole(u, p)
 
     p = db.security.getPermission('Edit', 'bug')
@@ -167,15 +167,14 @@
 
     p = db.security.getPermission('Edit','task')
     db.security.addPermissionToRole('Developer', p)
-    db.security.addPermissionToRole('Coordinator', p)
 
     p = db.security.getPermission('Edit', 'milestone')
-    db.security.addPermissionToRole('Coordinator', p)
+    for u in 'Developer', 'Coordinator':
+        db.security.addPermissionToRole(u, p)
     
     for cl in 'topic', 'platform', 'component':
         p = db.security.getPermission('Edit', cl)
-        for u in 'Developer', 'Coordinator':
-            db.security.addPermissionToRole(u, p)
+        db.security.addPermissionToRole('Developer', p)
 
     p = db.security.getPermission('Web Roles')
     db.security.addPermissionToRole('Coordinator', p)
@@ -184,6 +183,9 @@
     for cl in 'task', 'bug':
     	p = db.security.getPermission('Process', cl)
     	db.security.addPermissionToRole('Developer', p);
+
+    p = db.security.getPermission('Process', 'milestone')
+    db.security.addPermissionToRole('Coordinator', p)
 
     # and give the regular users access to the web and email interface
     p = db.security.getPermission('Web Access')