[Zope-Coders] Speaking of 2.6...

[Lennart Regebro]

I have been talking with Florent Guillaume and we have agreed to merge the
Local Roles Blacklist, NuxUserGroups and the Workgroups proposal into one,
which I now will start calling "Unified Groups" (because it sounds massive).

If this sounds like a good idea I'll update the list (or should Brian do
that?) and add the proposal to the Wiki.

Here is a quick outline of what Unified groups should do:

Overview

Unified Groups merges functionality of the NuxUserGroups addition by
Nuxeo( http://www.zope.org/Members/nuxeo/Products/NuxUserGroups ) and the
Local roles blacklist addition (
http://www.zope.org/Members/regebro/LRBlacklist ) by Torped and also adds
the functionality in the Workgroups proof of concept addition (
http://www.zope.org/Members/regebro/workgroups ).

It adds user groups to the Zope user management and adds another dimension
of roles mapping through these, as well as adding the possibility to block
out acquired local roles for users.

User stories

There is the possibility to create groups in the user folder.
Users can be added to each group.
Each user can get one or several roles withing this group.

The local roles and permission pages under the security tab should switch
places, so that the local roles (which now will be more than just local
roles) are the one that appears first. The permission pages is reached from
the local roles page.

Under the new security page you can give users or groups local roles. When a
group is given a local role, all members of that group will have that local
role.
You can block out acquired local roles for users or groups, thereby giving
them fewer roles than in a folder above.
You can "apply" groups to the folder. The users in the applied groups will
then have the local role they have in the group in addition to the roles
they have for the folder. (If this is unclear, try out the
http://www.zope.org/Members/regebro/workgroups monkeypatch. It does this).

And last but not least: You can for any user see what the effective roles
are in each location.


Suggestions for more user stories are welcome. Suggestions for improvement
of the UI are even more welcome. :-) There should be enough resources for
this with me and Florent, but I would welcome more discussions about this
proposal.

I currently have a cold (cough, sneeze) and are behind in my schedule, but
hope to start working on a UI mockup this weekend.