[Zope-CMF] Re: [dev] delete members: small proposal

[Chris Withers]

Yuppie wrote:
>> I think it would also be good to have an API for the following 
>> operations:
>>
>> - transfer ownership of all objects owned by a specific user to a new 
>> owner
>>
>> - delete all objects owned by a specific user
> 
> I don't like to add any code that supports the concept of executable 
> ownership of content objects.

Sam's suggestions don't do that, and I do think they are useful :-)
Many people care about who is responsible for a piece of content, and the Owner 
seems the logical way to track that...

> The only place where ownership still 
> matters is 'Creator' of Dublin Core. <http://collector.zope.org/CMF/25>

Urm, the Owner is correct. This bug is due to the Creator being set as the 
Owner, which is never the right thing to do ;-)

> If the member did add other items like python scripts, this issue 
> becomes much more complicated. To avoid trojan attacks, there's no 
> method (besides createMemberarea) that allows to assign membership to 
> someone else.

I don't think we're talking about that...

>> - delete all local roles for a specific user
> 
> I forgot about this. I guess these should be removed by default.

Would be good to have an option though...

cheers,

Chris