slapos_erp5: give user security group based on function (to access some...

slapos_erp5: give user security group based on function (to access some module) and project/function (to access documents)

master/bt5/slapos_erp5/SkinTemplateItem/portal_skins/slapos_core/ERP5Type_getSecurityCategoryMapping.py

@@ -8,9 +8,12 @@ deprecated ERP5Type_asSecurityGroupIdList
 
 return (
   # Person security
+  ('ERP5Type_getSecurityCategoryFromAssignment', ['function']),
   ('ERP5Type_getSecurityCategoryFromAssignment', ['group']),
   ('ERP5Type_getSecurityCategoryFromAssignment', ['role']),
+  # XXX TODO check that only validated project are used
   ('ERP5Type_getSecurityCategoryFromAssignment', ['destination_project']),
+  ('ERP5Type_getSecurityCategoryFromAssignment', ['destination_project', 'function']),
   ('ERP5Type_getSecurityCategoryFromAssignmentDestinationClientOrganisation', ['destination']),
   
   # Compute Node security