Wild and crazzzzy idea: Hierarchial permissions
The list of permissions is getting quite long. It's the basic permissions of Zope, plus the ones for our CM system. And we haven't even integrated CMF with it (which we may or may not do in the future). To make things easier to find we have names all our permissions "Easy <something>". I then got the idea that the permission list could be hierarchial or filtered or grouped or something. All permissions would have another setting to specify it group. That way the Zope base permissions could be grouped together into a "Zope Base" persmission group. We could group our in an "Torped Easy Publisher" permission group, and so on. Good idea or stupid?
I like the idea of having the permissions grouped in the management screen :-) Best, Leon de Heus Op Thu 22-11-2001, om 11:56 schreef Lennart Regebro:
The list of permissions is getting quite long. It's the basic permissions of Zope, plus the ones for our CM system. And we haven't even integrated CMF with it (which we may or may not do in the future).
To make things easier to find we have names all our permissions "Easy <something>". I then got the idea that the permission list could be hierarchial or filtered or grouped or something. All permissions would have another setting to specify it group. That way the Zope base permissions could be grouped together into a "Zope Base" persmission group. We could group our in an "Torped Easy Publisher" permission group, and so on.
Good idea or stupid?
Lennart Regebro wrote:
The list of permissions is getting quite long. It's the basic permissions of Zope, plus the ones for our CM system. And we haven't even integrated CMF with it (which we may or may not do in the future).
To make things easier to find we have names all our permissions "Easy <something>". I then got the idea that the permission list could be hierarchial or filtered or grouped or something. All permissions would have another setting to specify it group. That way the Zope base permissions could be grouped together into a "Zope Base" persmission group. We could group our in an "Torped Easy Publisher" permission group, and so on.
Good idea or stupid?
Well, for your use you could just hardcode some permission "groups" and include them in the dtml-file which resembles zopes security screen. A little bit javascript and selecting one of your groups would automagically be checked when you check one of your groups. What I'm missig more is flexibility for the "Add object" mechanism. The possibility to install products not globally, but locally for a folder and it's subfolders and some hierachical sorting of "add type" selectbox. Perhaps the tree could be (ab-)used to get a structure like + text product - DTML Document - DTML Method + Images, Files - Image - File + SQL Stuff - ZSQL Method - PoPy Database Connection - Search Interface etc.... To get back to the topic, perhaps your wishes and mine could be combined: A permissions group for "edit text products" which would automatically select the right permissions. cheers, oliver
From: "Oliver Bleutgen" <myzope@gmx.net>
Well, for your use you could just hardcode some permission "groups" and include them in the dtml-file which resembles zopes security screen. A little bit javascript and selecting one of your groups would automagically be checked when you check one of your groups.
True, good idea. If the list gets too big (we are not there yet) we might do this. But it would be nice to have general support for it. Unless somebody scream I'll make a proposal.
What I'm missig more is flexibility for the "Add object" mechanism.
Yeah, that would be nice too. It's not any problem for us, since only managers get to see many objects to add, but I wouldn't complain if the feature was there. :-)
To get back to the topic, perhaps your wishes and mine could be combined: A permissions group for "edit text products" which would automatically select the right permissions.
Hmmm... So you mean that the group is a permission too, that sets all of the permissions in the group? Thats not what I was thinking about at all, but it might be a good idea....
Lennart Regebro wrote:
From: "Oliver Bleutgen" <myzope@gmx.net>
Well, for your use you could just hardcode some permission "groups" and include them in the dtml-file which resembles zopes security screen. A little bit javascript and selecting one of your groups would automagically be checked when you check one of your groups.
Ups, my last sentence here is astonishing hard to parse ;-).
True, good idea. If the list gets too big (we are not there yet) we might do this. But it would be nice to have general support for it. Unless somebody scream I'll make a proposal.
But I see you understood anyway.
What I'm missig more is flexibility for the "Add object" mechanism.
Yeah, that would be nice too. It's not any problem for us, since only managers get to see many objects to add, but I wouldn't complain if the feature was there. :-)
To get back to the topic, perhaps your wishes and mine could be combined: A permissions group for "edit text products" which would automatically select the right permissions.
Hmmm... So you mean that the group is a permission too, that sets all of the permissions in the group? Thats not what I was thinking about at all, but it might be a good idea....
Not really a permission, it perhaps just could give the information on how the security ZMI page would build these "one-click - multi-permissions" checkboxes. cheers, oliver
What I'm missig more is flexibility for the "Add object" mechanism. The possibility to install products not globally, but locally for a folder and it's subfolders and some hierachical sorting of "add type" selectbox.
Hi! With OrderedFolder, you can at least clean up the Add menu locally. That might help for a lot of situations. It is not creating tree views yet, but it's a start ... Joachim
Limiting the list of products in the Add Object list can be done currently using my PatchKit product - http://www.zope.org/Members/haqa/PatchKit (It does some other stuff too) Adrian... ----- Original Message ----- From: "Oliver Bleutgen" <myzope@gmx.net> To: <zope-dev@zope.org> Sent: Thursday, November 22, 2001 12:22 PM Subject: Re: [Zope-dev] Wild and crazzzzy idea: Hierarchial permissions Lennart Regebro wrote:
The list of permissions is getting quite long. It's the basic permissions of Zope, plus the ones for our CM system. And we haven't even integrated CMF with it (which we may or may not do in the future).
To make things easier to find we have names all our permissions "Easy <something>". I then got the idea that the permission list could be hierarchial or filtered or grouped or something. All permissions would have another setting to specify it group. That way the Zope base permissions could be grouped together into a "Zope Base" persmission group. We could group our in an "Torped Easy Publisher" permission group, and so on.
Good idea or stupid?
Well, for your use you could just hardcode some permission "groups" and include them in the dtml-file which resembles zopes security screen. A little bit javascript and selecting one of your groups would automagically be checked when you check one of your groups. What I'm missig more is flexibility for the "Add object" mechanism. The possibility to install products not globally, but locally for a folder and it's subfolders and some hierachical sorting of "add type" selectbox. Perhaps the tree could be (ab-)used to get a structure like + text product - DTML Document - DTML Method + Images, Files - Image - File + SQL Stuff - ZSQL Method - PoPy Database Connection - Search Interface etc.... To get back to the topic, perhaps your wishes and mine could be combined: A permissions group for "edit text products" which would automatically select the right permissions. cheers, oliver _______________________________________________ Zope-Dev maillist - Zope-Dev@zope.org http://lists.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope )
participants (6)
-
Adrian Hungate -
Joachim Werner -
Lennart Regebro -
Lennart Regebro -
Leon De Heus -
Oliver Bleutgen