Hi, You can do both, but setting roles in GrpA is surely better ! (you do not have to process individuals but only work on groups). Regarding LDAP : In LDAPUserFolder, LDAP "groups" are bound to Zope "roles". So if you want to make LDAPUF's groups to appear as GroupUserFolder groups, you've got to put an LDAPUF in GRUF's Users section and another LDAPUF in GRUF's Groups section. Binding will be done automatically if Zope roles match LDAP groups, or you've got to set binding by hand in LDAPUF's interface. We've been working happily with the LDAPUserFolder/GroupUserFolder combination, and we should provide an detailed explanation on how to do so in GRUF's README.txt file soon ! :-) Regards, P.-J. Grizel mailto:grizel@ingeniweb.com
i cannot answer questions about the groupuserfolder product. i don't know it.
jens
On Sunday, Apr 13, 2003, at 19:47 US/Eastern, David Orr wrote:
Hi Jens,
Thanks for the quick reply (and the great product!). I was looking more at the GroupUserFolder concept (by ingeniweb) but you are correct in that I was getting confused with "groups" in LDAP as well.
For an example: I want to creat a group (GrpA) that can access a particular directory (DirA). So do I set up GrpA with the role of member in DirA and then set up individual(s) (or another group) to act as reviewer, OR can I set up roles within GrpA (member, reviewer, manager etc) that then apply in DirA?
David
_______________________________________________ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )