[opencms-dev] Question about groups and roles

[Raj Malhotra]

about B) you can create new role using CmsRole(java.lang.String roleName,
CmsRole parentRole, java.lang.String groupName, boolean ouDependent).This
creates a userdefiend role. The other things i am also not sure about
roles.If any body knows further please reply or post  a tutorial on it.

thanks
Raj
         

Rudolf Blazek wrote:
> 
> The new roles in OpenCms 7 are great. The previous 'locked' roles  
> were hard to use. But I have some serious questions about roles and  
> groups.
> 
> The problem:
> A) You can assign users to roles, but cannot assign groups to roles.
> B) You cannot create custom roles that would map your custom groups  
> to various roles.
> 
> I do not want to add users to a group and a role. I just want to  
> assign them to a group and have all roles automatically configured.  
> (B) is what we need for that.
> 
> 
> Is there something I am missing? I would appreciate if someone could  
> comment.  Details are enclosed
> 
> Thank you
> Rudolf Blazek
> 
> 
> --------------
> 
> Here is how I understand the situation:
> 1) Members of the group "Users" used to be able to log into the  
> workplace. That is no longer the case.
> 2) Instead, we have to make the users members of the role "Workplace  
> user"
> 
> So far it's OK, but here it gets insane:
> i) Roles membership is based on group membership. But we CANNOT work  
> with those groups!!!
> ii) That means we have to add users to the role BY HAND ONE BY ONE.  
> YUCK!!!
> 
> Example:
> a) The role "Workplace user" is associated with the group  
> "RoleWorkplaceUsers". The group's members have that role.
> b) You cannot add users to that group. That would be OK if you could  
> use subgroups, but that does not work.
> c) It does not help if you create a group e.g.  
> "MySubsiteEditorsWhoCanAccessTheWorkplace" and make it a subgroup of  
> "RoleWorkplaceUsers". The users will be implicitly members of the  
> "RoleWorkplaceUsers" group, but will not have the role "Workplace  
> user" because they are not direct members of the group.
> 
> Can anyone clarify? Thanks.
> 
> _______________________________________________
> This mail is sent to you from the opencms-dev mailing list
> To change your list options, or to unsubscribe from the list, please visit
> http://lists.opencms.org/mailman/listinfo/opencms-dev
> 
> 

-- 
View this message in context: http://www.nabble.com/Question-about-groups-and-roles-tp11918301p16983046.html
Sent from the OpenCMS - Dev mailing list archive at Nabble.com.