[Zope-CMF] DCWorkflow Worklists do not honour local roles

[John Morton]

On Wed, 02 Oct 2002 04:12, Robert Rottermann wrote:
> In an intranet I like to assign reviewer rights to different parts of the
> site to different people.
> However it looks as if a reviewer has to have the Reviewer role assigned on
> portal level. Otherwise
> the worklists return immediately without filtering for pending objects.
>
> Do I misunderstand something?
>
> The worklist's Category is set to global. What does that mean? What is a
> non global worklist ?? What other setings could I use?

Part of the reason is that worklists default to appearing in the global 
section of the action box, and global actions are evaluated in the context of 
the site root. However, switching to an action catagory which results in the
action being evaluated in the context of the object you're looking at could 
get confusing - you want to see the worklists anywhere in the site that you 
are, but in some places in the site you don't have the local role that guards 
the worklist, so you don't see it.

You really don't want to use worklist guards at all - in practice, worklists 
are also guarded by the permissions on the objects of a given state that they 
are listing. A worklist only appears if a catalog query against objects of a 
given state (or states or other things in recent versions of DCWorkflow) 
returns matching objects, and the catalog query is filtered through the 
access control machinery, which I believe _is_ smart enough to handle local 
roles. 

But I haven't explicitly tested a lot of that stuff with local roles, so give 
it a go and let the list know how you get on :-)

John