[opencms-dev] Create group

[Mark Belanger]

Hi Thomas,

I followed your instructions as I understood them, but I'm still not 
seeing how this works.

First, I created a new group called 'SiteEditor'.  It's parent was 
'User', otherwise I'd get an "Unknown User" error when trying to login 
in.  Both "Projectuser" and "Role for tasks" checkboxes were selected.

Second, I created a new sub-group called 'JobEditor', whose parent was 
'SiteEditor'.  Both "Projectuser" and "Role for tasks" checkboxes were 
selected.

Third, I changed the site permissions as follows:

  Directory    Group       Permissions
  ------------------------------------
  /site         SiteEditor  rwvrwvr-v-
    /about      SiteEditor  rwvrwvr-v-
    /contact    SiteEditor  rwvrwvr-v-
    /jobs       JobEditor   rwvrwvr-v-
    /products   SiteEditor  rwvrwvr-v-

Unfortunately, when I login as either user, they both have full editing 
access, apparently, since they're both indirectly part of the "User" 
group.  The only method I've been able to find to restrict access in 
this way by creating projects with only a sub-directory selected.  But 
since the user can change the project list drop-down to any one they 
choose, this security doesn't work.

I'm sorry to keep writing, but I just don't get it.  If the 
permissioning system works at all in the way we need, it is the most 
counter-intuitive one I've ever used.


Thanks in advance,
MB

Thomas März wrote:
> Mark Belanger <belanger at fluid.com> writes:
> 
> 
>>As I understand your logic, I could create a new group called
>>"JobsEditor" whose parent was "User."  By assigning "jobs-editor" to
>>the "JobsEditor" group and changing the permissions like so:
>>
>>Directory    Group       Permissions
>>------------------------------------
>>/site        User        rwvrwvrr---
>>  /about      User        rwvrwvrr---
>>  /contact    User        rwvrwvrr---
>>  /jobs       JobEditor   rwvrwvrrwv-
>>  /products   User        rwvrwvrr---
> 
> 
> Directory    Group       Permissions
> ------------------------------------
> /site         SiteEditor  rwvrwvr-v-
>   /about      SiteEditor  rwvrwvr-v-
>   /contact    SiteEditor  rwvrwvr-v-
>   /jobs       JobEditor   rwvrwvr-v-
>   /products   SiteEditor  rwvrwvr-v-
> 
> 
>>then "jobs-editor" would be able to only edit the "jobs"
>>subsection. Meanwhile, "site-editor" would still be able to edit and
>>section.
> 
> 
> Add "site-editor" to both groups.
> 
> _______________________________________________
> This mail is send to you from the opencms-dev mailing list
> To change your list options, or to unsubscribe from the list, please visit
> http://mail.opencms.org/mailman/listinfo/opencms-dev
> 
> 
> !DSPAM:4093d713271626230220212!
> 
> 

-- 
_______________________________________________________________________
Mark Belanger - belanger at fluid.com