[opencms-dev] Create group

[Mark Belanger]

Can anyone point me to documentation, a FAQ or anything else on how 
permission works with OpenCMS?  I've burned so much time on this now and 
I'm suspecting it can't be done.


Thanks,
MB

Mark Belanger wrote:
> Hi Thomas,
> 
> I followed your instructions as I understood them, but I'm still not 
> seeing how this works.
> 
> First, I created a new group called 'SiteEditor'.  It's parent was 
> 'User', otherwise I'd get an "Unknown User" error when trying to login 
> in.  Both "Projectuser" and "Role for tasks" checkboxes were selected.
> 
> Second, I created a new sub-group called 'JobEditor', whose parent was 
> 'SiteEditor'.  Both "Projectuser" and "Role for tasks" checkboxes were 
> selected.
> 
> Third, I changed the site permissions as follows:
> 
>  Directory    Group       Permissions
>  ------------------------------------
>  /site         SiteEditor  rwvrwvr-v-
>    /about      SiteEditor  rwvrwvr-v-
>    /contact    SiteEditor  rwvrwvr-v-
>    /jobs       JobEditor   rwvrwvr-v-
>    /products   SiteEditor  rwvrwvr-v-
> 
> Unfortunately, when I login as either user, they both have full editing 
> access, apparently, since they're both indirectly part of the "User" 
> group.  The only method I've been able to find to restrict access in 
> this way by creating projects with only a sub-directory selected.  But 
> since the user can change the project list drop-down to any one they 
> choose, this security doesn't work.
> 
> I'm sorry to keep writing, but I just don't get it.  If the 
> permissioning system works at all in the way we need, it is the most 
> counter-intuitive one I've ever used.
> 
> 
> Thanks in advance,
> MB
> 
> Thomas März wrote:
> 
>> Mark Belanger <belanger at fluid.com> writes:
>>
>>
>>> As I understand your logic, I could create a new group called
>>> "JobsEditor" whose parent was "User."  By assigning "jobs-editor" to
>>> the "JobsEditor" group and changing the permissions like so:
>>>
>>> Directory    Group       Permissions
>>> ------------------------------------
>>> /site        User        rwvrwvrr---
>>>  /about      User        rwvrwvrr---
>>>  /contact    User        rwvrwvrr---
>>>  /jobs       JobEditor   rwvrwvrrwv-
>>>  /products   User        rwvrwvrr---
>>
>>
>>
>> Directory    Group       Permissions
>> ------------------------------------
>> /site         SiteEditor  rwvrwvr-v-
>>   /about      SiteEditor  rwvrwvr-v-
>>   /contact    SiteEditor  rwvrwvr-v-
>>   /jobs       JobEditor   rwvrwvr-v-
>>   /products   SiteEditor  rwvrwvr-v-
>>
>>
>>> then "jobs-editor" would be able to only edit the "jobs"
>>> subsection. Meanwhile, "site-editor" would still be able to edit and
>>> section.
>>
>>
>>
>> Add "site-editor" to both groups.
>>
>> _______________________________________________
>> This mail is send to you from the opencms-dev mailing list
>> To change your list options, or to unsubscribe from the list, please 
>> visit
>> http://mail.opencms.org/mailman/listinfo/opencms-dev
>>
>>
>>
>>
>>
> 

-- 
_______________________________________________________________________
Mark Belanger - belanger at fluid.com