allow users to manage groups

pboard/pboard/controllers/admin.py

 # -*- coding: utf-8 -*-
 """Main Controller"""
 
+import tg.predicates
 from tgext.admin.config import AdminConfig, CrudRestControllerConfig
 from sprox.formbase import AddRecordForm
 from sprox import formbase as sform
     display_name           = TextField
     verify_password        = PasswordField('verify_password')
     groups = tw2f.MultipleSelectionField('groups')
-    """
-    __base_validator__     = form_validator
-    """
+
 
 class UserTableFiller(sfill.TableFiller):
 
 class PodAdminConfig(AdminConfig):
     user = UserCrudConfig
     group = GroupCrudConfig
-
+    allow_only = tg.predicates.in_group('user')
 
 

pboard/pboard/controllers/debug.py

 
 class DebugController(BaseController):
 
-  allow_only = predicates.in_group('admin',
-                              msg=l_('You\'re not allowed to access this page'))
+  # allow_only = predicates.in_group('admin',
+  #                            msg=l_('You\'re not allowed to access this page'))
 
   @expose('pboard.templates.debug.iconset')
   def iconset(self, **kw):

pboard/pboard/templates/document-widgets.mak

       <a class="btn btn-small dropdown-toggle" data-toggle="dropdown" href="#">
         <span class="caret"></span>
       </a>
-      <ul class="dropdown-menu">
+      <ul class="dropdown-menu pull-right">
         <li>
           <div class="pod-grey strong" ><strong><i class="fa fa-magic"></i> ${_('Current status is...')}</strong><br/></div>
         </li>

pboard/pboard/templates/master.mak

 
           % endif
 
-          % if request.identity and request.identity['repoze.who.userid']=='damien@accorsi.info':
+          % if request.identity:
             <li class="dropdown">
-              <a href="#" class="dropdown-toggle" data-toggle="dropdown">Admin <b class="caret"></b></a>
+              <a href="#" class="dropdown-toggle" data-toggle="dropdown">
+                <i class="fa fa-cogs"></i>
+                Admin <b class="caret"></b>
+              </a>
               <ul class="dropdown-menu">
-                <li><a href="${tg.url('/admin')}"><i class="fa fa-magic"></i> Manage</a></li>
+                <li><a href="${tg.url('/admin/users')}"><i class="fa fa-user"></i> ${_('List users')}</a></li>
+                <li><a href="${tg.url('/admin/groups')}"><i class="fa fa-group"></i> ${_('Manage groups')}</a></li>
+                % if request.identity and 'managers' in request.identity['groups']:
+                  <li class="divider" role="presentation"></li>
+                  <li><a href="${tg.url('/admin')}"><i class="fa fa-magic"></i> Manage all</a></li>
+                % endif
               </ul>
             </li>
-            
+          % endif
+
+          % if request.identity and 'managers' in request.identity['groups']:
             <li class="dropdown">
               <a href="#" class="dropdown-toggle" data-toggle="dropdown"><i class="fa fa-cogs "></i> Debug <b class="caret"></b></a>
               <ul class="dropdown-menu">