appy.gen: implemented a variant of Zope's 'has_permission' in method called 'mixin.allows', which does not make some assumptions, like the fact that an admin is Owner of any object or the fact that an Authenticated user has also role Anonymous; added button 'refresh security' for refreshing security information on every database object (it is needed because Zope requires us to duplicate security info on every object).

gen/plone25/wrappers/ToolWrapper.py

@@ -127,4 +127,15 @@ class ToolWrapper(AbstractWrapper):
                                       fileName, format, self.openOfficePort)
         self.log('Executing %s...' % cmd)
         return executeCommand(cmd) # The result can contain an error message
+
+    def refreshSecurity(self):
+        '''Refreshes, on every object in the database, security-related,
+           workflow-managed information.'''
+        context = {'nb': 0}
+        for className in self.o.getProductConfig().allClassNames:
+            self.compute(className, context=context, noSecurity=True,
+                         expression="ctx['nb'] += int(obj.o.refreshSecurity())")
+        msg = 'Security refresh: %d object(s) updated.' % context['nb']
+        self.log(msg)
+        self.say(msg)
 # ------------------------------------------------------------------------------