Commit 58c9f7c3 authored by Vincent Pelletier's avatar Vincent Pelletier

erp5.zope: Disable ownership checking.

parent 21e5c458
...@@ -203,7 +203,7 @@ md5sum = 1cb9160482a6be615c34dbc55b017dce ...@@ -203,7 +203,7 @@ md5sum = 1cb9160482a6be615c34dbc55b017dce
[template-zope-conf] [template-zope-conf]
< = download-base < = download-base
filename = zope.conf.in filename = zope.conf.in
md5sum = b54344ee94519f7e95e270664ba3dc99 md5sum = 5ad1664a39fbab5f8450c7fb36c81945
[template-my-cnf] [template-my-cnf]
< = download-base < = download-base
......
...@@ -3,6 +3,14 @@ ...@@ -3,6 +3,14 @@
%define INSTANCE {{ instance }} %define INSTANCE {{ instance }}
instancehome $INSTANCE instancehome $INSTANCE
zserver-threads {{ parameter_dict['thread-amount'] }} zserver-threads {{ parameter_dict['thread-amount'] }}
# When ownership checking is enabled, the roles a script runs as are the
# intersection between user's roles and script owner's roles. This means
# that revoking a code author's access to the system prevent all scripts
# owned by that user from being of much use.
# This is not how ERP5 approaches development: Managers write code,
# Managers must be trustable and trusted, and their past work should not be
# revoked when their account is terminated.
skip-ownership-checking true
lock-filename {{ parameter_dict['lock-file'] }} lock-filename {{ parameter_dict['lock-file'] }}
pid-filename {{ parameter_dict['pid-file'] }} pid-filename {{ parameter_dict['pid-file'] }}
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment