[opencms-dev] Role based permissions

[walter de wit]

Hi Birgit,

I'm afraid I have to disappoint you: I'm from Belgium and my knowledge of 
the German language is nada, nul, zero. However thank you for the effort and 
time.

When looking at your document (read: looking at the images :-) I have the 
idea it is about the standard way permissions are build in in OpenCMS. This 
Unix-like approach for permissions is not enough when you need permissions 
on actions.

Let me explain the permission model we need:
Visitor: may view the content
Author : may create new content or edit existing content
Revisor: reads the modifications of the authors and approves them.
Publisher: can publish the approved content (only the approved content).

The publisher is the projectmanager. The visitor permissions can be set by 
the existing permission model (only read access).
The author needs write access to the folders and the files.
The revisor in fact does not need to change the content only change meta 
data of the content.

I don't think standard OpenCMS supports this revisor permission. A possible 
implementation of my problem could be: every document has a property named 
"approved". This is set to false each time the content has changed. The 
revisor can "approve" the content (through a new context menu option). This 
sets the approved flag to true and adds some extra properties like 
approvaldate, approver, ...
I should also disallow the editor from changing the approved property 
himself !

Is this a good way of working ? Do you have any suggestions ?

Thanks already,

Walter.
PS: sorry for the long mail




>From: Birgit Hämmerling <Christall at gmx.net>
>Reply-To: opencms-dev at opencms.org
>To: opencms-dev at opencms.org
>Subject: Re: [opencms-dev] Role based permissions
>Date: Mon, 7 Apr 2003 12:50:43 +0200 (MEST)
>
>Hi!
>
>Sorry that I'm writing you only a very short answer - I don't have the time
>to answer in more details.
>Maybe you can have a look at the mail-archive. The permission-question was
>discussed a few weeks ago (subject: folder permission).
>
>I hope you're also German because of your name ("walter"). Therefore I'm
>sending you a small paper about that topic - but unfortunately it's in 
>German
>language. If you need further information you can send me a mail. Then you
>should tell me more about the activities of your roles.
>
>Birgit
>
>
> > Hello,
> >
> > Is there a way to define permissions on actions ? I'm investigating
> > OpenCMS
> > and one of the required features is to be able to define role 
>permissions
> > on
> > actions. We have 3 kind of roles: editors, approvers and publishers (and
> > of
> > course just readers also). Publishing is a separate action (only for
> > project
> > managers if I'm not wrong) but is there a way to introduce approvers ? 
>If
> > it
> > is not available can you give me tips to build it in ?
> >
> > Thanks already,
> >
> > Walter.
> >
> > By the way: thank you for the quick response about my templates 
>question.
> > That part works fine now.
> >
> >
> >
> >
> > _________________________________________________________________
> >
> >
> > _______________________________________________
> > This mail is send to you from the opencms-dev mailing list
> > To change your list options, or to unsubscribe from the list, please 
>visit
> > http://mail.opencms.org/mailman/listinfo/opencms-dev
> >
>
>--
>+++ GMX - Mail, Messaging & more  http://www.gmx.net +++
>Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage!
><< Benutzerverwaltung.doc >>


_________________________________________________________________
Valentijn bij MSN ! http://www.msn.be/valentijn