How to check permission in Plone?

Question

Looking at http://developer.plone.org on how to check the resolution, the first two results:

• http://developer.plone.org/reference_manuals/external/plone.app.dexterity/advanced/permissions.html
• http://docs.plone.org/4/en/develop/plone/security/permissions.html

The first protects zope.security.checkPermission, and the second prefers AccessControl.getSecurityManager().checkPermission.

Looking at setup.py AccessControl, I see that it depends on zope.security, so the later version is lower level, so to speak, but at the same time, zope.security seems to be getting more attention now, while AccessControl seems more stable (regarding the receipt of changes on it).

So, I wonder what a safe and modern way to check permissions.

Answer 1

I personally always use the checkPermission from the AccessControl, but I believe that under the hood, both zope.security and AccessControl will call the same code. I searched this code before, and I think it is actually in the C part of the role / permission logic.

Answer 2

I personally prefer to use plone.api. See document plone.api.user

This way you do not need to care about the low level api. Even if this changes in the future, plone.api will fix it for you :-)