We have a /homes folder where I intend to allow LAN users to have their own home directories. So, for this folder, I've changed permission so that "Owner" can see management views, edit DTML, add DTML, Folders, images, etc. Then, as each user, I create a folder for them (so that they own it.) They now can manage their folders, edit, etc. perfectly. [ with the oddity that Add ODBC Connection always shows up, BTW. It seems to have a wrong permission setting. ] My users can "Add User Folder", so they can add an acl_users folder so that they can create private areas, etc.; however, they *can't* seem to edit the user's directly: clicking on the acl_users only shows them the Undo/Security options, not the contents tab of acl_users. By directly entering the URL, they can get to the contents tab, and add/edit users. However, I can't figure out how my users can change the permissions of subfolders in their home directory. When they get into a intended-to-be-private subdir, and ask to see the permissions for it (so that they could take View away from Anon), they see the permission categories but EVERYTHING is unchecked. Am I doing something wrong? Is this a bug in this version (2.3.0/Windows)? Is there a document somewhere that describes user folders in a non-portal environment? Thanks for *any* help! -- Joel Burton <jburton@scw.org> Director of Information Systems, Support Center of Washington
Okay, I'm still really new, but I have to start helping out sooner or later, so here goes. I do something similar by assigning a local role of Manager to each user for his/her own folder. It may then be possible (more knowledgable people, come to my rescue here!) to create all of the user folders from a single account with a global role of Manager, since ownership is not an issue if the user has local Manager permissions? Craig On Wed, 28 Feb 2001, Joel Burton wrote:
We have a /homes folder where I intend to allow LAN users to have their own home directories.
So, for this folder, I've changed permission so that "Owner" can see management views, edit DTML, add DTML, Folders, images, etc.
Then, as each user, I create a folder for them (so that they own it.) They now can manage their folders, edit, etc. perfectly.
[ with the oddity that Add ODBC Connection always shows up, BTW. It seems to have a wrong permission setting. ]
My users can "Add User Folder", so they can add an acl_users folder so that they can create private areas, etc.; however, they *can't* seem to edit the user's directly: clicking on the acl_users only shows them the Undo/Security options, not the contents tab of acl_users. By directly entering the URL, they can get to the contents tab, and add/edit users.
However, I can't figure out how my users can change the permissions of subfolders in their home directory. When they get into a intended-to-be-private subdir, and ask to see the permissions for it (so that they could take View away from Anon), they see the permission categories but EVERYTHING is unchecked.
Am I doing something wrong? Is this a bug in this version (2.3.0/Windows)? Is there a document somewhere that describes user folders in a non-portal environment?
Thanks for *any* help!
-- Joel Burton <jburton@scw.org> Director of Information Systems, Support Center of Washington
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Craig Dunigan Web Programmer Esker Software - Extending the Reach of Information mailto://craig.dunigan@esker.com tel 608.273.6000 ext.362 fax 608.273.8227 http://www.esker.com
On Wed, 28 Feb 2001, Craig Dunigan wrote:
Okay, I'm still really new, but I have to start helping out sooner or later, so here goes.
Thanks for your suggestion!
I do something similar by assigning a local role of Manager to each user for his/her own folder. It may then be possible (more knowledgable people, come to my rescue here!) to create all of the user folders from a single account with a global role of Manager, since ownership is not an issue if the user has local Manager permissions?
That is possible, and would work well, I think, but if I could get it working, I think Owner would be better. I was hoping to take the Owner route b/c I'd have to set up the local role of Mgr for *each* folder for each person (I don't want Jim to manage Jeff's folder), whereas with the Owner schema I can (should be able to?) simple assign for the enclosing /home folder that Owners have certain rights, and as the folders get created, they get those rights. (Plus, part of the challenge would be that I don't *want* them to do many things that Managers can do--I'd have to create a new Role, 'ContentCreator' or somesuch, with certain permissions, and have them get that, not the Manager role.) -- Joel Burton <jburton@scw.org> Director of Information Systems, Support Center of Washington
Joel, I apologize if I'm wrong here, but I'm not sure you understood the suggestion correctly. In Zope it is possible to give a user object a normal role for most of the site but give them a 'local' role for one particular part. I've created a few sites where people have local management roles and not one of the users has a role of Manager associated. This is accomplished by the API call: manage_addLocalRoles(userid, roles, [REQUEST]) Set local roles for a user This is taken from the excellent Zope Quick Reference (which sadly is slightly out of date, but still a good reference). So the basic logic is: 1. Create user 2. Create home folder 3. manage_addLocalRoles onto the new folder. and not a Manager in site ;) hth Phil phil.harris@zope.co.uk On Wednesday 28 February 2001 18:52, Joel Burton wrote:
On Wed, 28 Feb 2001, Craig Dunigan wrote:
Okay, I'm still really new, but I have to start helping out sooner or later, so here goes.
Thanks for your suggestion!
I do something similar by assigning a local role of Manager to each user for his/her own folder. It may then be possible (more knowledgable people, come to my rescue here!) to create all of the user folders from a single account with a global role of Manager, since ownership is not an issue if the user has local Manager permissions?
That is possible, and would work well, I think, but if I could get it working, I think Owner would be better.
I was hoping to take the Owner route b/c I'd have to set up the local role of Mgr for *each* folder for each person (I don't want Jim to manage Jeff's folder), whereas with the Owner schema I can (should be able to?) simple assign for the enclosing /home folder that Owners have certain rights, and as the folders get created, they get those rights.
(Plus, part of the challenge would be that I don't *want* them to do many things that Managers can do--I'd have to create a new Role, 'ContentCreator' or somesuch, with certain permissions, and have them get that, not the Manager role.)
On Wed, 28 Feb 2001, Phil Harris wrote:
I apologize if I'm wrong here, but I'm not sure you understood the suggestion correctly.
Well, I did and I didn't :-)
This is accomplished by the API call:
manage_addLocalRoles(userid, roles, [REQUEST]) Set local roles for a user
This is taken from the excellent Zope Quick Reference (which sadly is slightly out of date, but still a good reference).
So the basic logic is:
1. Create user 2. Create home folder 3. manage_addLocalRoles onto the new folder.
and not a Manager in site ;)
What I didn't consider what handling the role stuff via a script (like an add script for the home user folder class.) This would make the assignation of this-person-gets-this-role less tedious. (Lots of users.)
I was hoping to take the Owner route b/c I'd have to set up the local role of Mgr for *each* folder for each person (I don't want Jim to manage Jeff's folder), whereas with the Owner schema I can (should be able to?) simple assign for the enclosing /home folder that Owners have certain rights, and as the folders get created, they get those rights.
I still feel that having them inherit rights as being the owner of the folder is a 'cleaner' way of doing this, though, (if only it would work. :-) ) If I don't figure out/get some help on the direct-Owner path, I probably will go w/the local role assigned by addScript method. Thanks for the clarification of your help, -- Joel Burton <jburton@scw.org> Director of Information Systems, Support Center of Washington
Phil - Thanks so much for the script sample! I've been planning to do exactly that, for the same reason as Joel (lots of users, all to go online at the same time). Now I don't have to search the docs for a starting point - thanks! Joel - I understand the preference for the Owner role, but I'm actually using home-grown user folders, and the local Manager role works better for us. I thought it might for you too, but I guess not. We use a home-grown xmlrpc client (thanks to Marty Stitt, who recently left our company, if he's still reading this list, you're brilliant!) to synchronize users local trees with their remote trees, and don't give them access to the Zope management interface at all, so we probably don't have the same concerns about the Manager role as you. Anyway, I'm glad my early attempt at giving something back didn't go too far awry, even if it wasn't all that helpful. :-) Craig On Wed, 28 Feb 2001, Phil Harris wrote:
Joel,
I apologize if I'm wrong here, but I'm not sure you understood the suggestion correctly.
In Zope it is possible to give a user object a normal role for most of the site but give them a 'local' role for one particular part.
I've created a few sites where people have local management roles and not one of the users has a role of Manager associated.
This is accomplished by the API call:
manage_addLocalRoles(userid, roles, [REQUEST]) Set local roles for a user
This is taken from the excellent Zope Quick Reference (which sadly is slightly out of date, but still a good reference).
So the basic logic is:
1. Create user 2. Create home folder 3. manage_addLocalRoles onto the new folder.
and not a Manager in site ;)
hth
Phil phil.harris@zope.co.uk
On Wednesday 28 February 2001 18:52, Joel Burton wrote:
On Wed, 28 Feb 2001, Craig Dunigan wrote:
Okay, I'm still really new, but I have to start helping out sooner or later, so here goes.
Thanks for your suggestion!
I do something similar by assigning a local role of Manager to each user for his/her own folder. It may then be possible (more knowledgable people, come to my rescue here!) to create all of the user folders from a single account with a global role of Manager, since ownership is not an issue if the user has local Manager permissions?
That is possible, and would work well, I think, but if I could get it working, I think Owner would be better.
I was hoping to take the Owner route b/c I'd have to set up the local role of Mgr for *each* folder for each person (I don't want Jim to manage Jeff's folder), whereas with the Owner schema I can (should be able to?) simple assign for the enclosing /home folder that Owners have certain rights, and as the folders get created, they get those rights.
(Plus, part of the challenge would be that I don't *want* them to do many things that Managers can do--I'd have to create a new Role, 'ContentCreator' or somesuch, with certain permissions, and have them get that, not the Manager role.)
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Craig Dunigan Web Programmer Esker Software - Extending the Reach of Information mailto://craig.dunigan@esker.com tel 608.273.6000 ext.362 fax 608.273.8227 http://www.esker.com
participants (3)
-
Craig Dunigan -
Joel Burton -
Phil Harris