[opencms-dev] OpenCms 7.5.1+: more granular permission system

[Michael Moossen]

Hi, Kai!

 > Is there some kind of double usage of the +c / -c flag?
Yes, it means (almost) always control as in the docs, except in the 
explorer types where 'c' means create and not control, as just explained.

 > By the way. When setting permissions on a folder, the write permission
 > is shown twice (see screenshot). Seems to be a bug.
sorry, but i have not seen that before...

HTH
-------------------
Michael Moossen

Alkacon Software GmbH  - The OpenCms Experts
http://www.alkacon.com - http://www.opencms.org

Schliemann, Kai schrieb:
> Hi Roman, hi Michael,
> I meant it exactly as Roman understood it.
> 
> But Michael, I am heavily confused. 
> The class CmsPermissionSet says: 
> @link CmsPermissionSet#PERMISSION_CONTROL} (c) the right to set permissions of a resource
> 
> Is there some kind of double usage of the +c / -c flag?
> 1. when set as permission in the workplace and
> 2. when set in opencms-workplace.xml?
> 
> By the way. When setting permissions on a folder, the write permission is shown twice (see screenshot). Seems to be a bug.
> 
> Regards
> Kai
> 
> -----Ursprüngliche Nachricht-----
> Von: opencms-dev-bounces at opencms.org [mailto:opencms-dev-bounces at opencms.org] Im Auftrag von Roman Uhlig Maxity.de
> Gesendet: Montag, 7. Dezember 2009 13:04
> An: The OpenCms mailing list
> Betreff: Re: [opencms-dev] OpenCms 7.5.1+: more granular permission system
> 
>  
> Michael,
> 
> I guess he meant in the workplace, possible to define for particular folders or other resources. At least I did. ;)
> 
> Regards,
> Roman
> 
> 
> -----Ursprüngliche Nachricht-----
> Von: opencms-dev-bounces at opencms.org [mailto:opencms-dev-bounces at opencms.org] Im Auftrag von Michael Moossen
> Gesendet: Montag, 7. Dezember 2009 12:48
> An: The OpenCms mailing list
> Betreff: Re: [opencms-dev] OpenCms 7.5.1+: more granular permission system
> 
> Hi Kai, Achim!
> 
> already the permissions to create a resource can be configured 
> separately in the explorer type configuration of the resource type.
> 
> for instance, here for jsp files in the opencms-workplace.jsp:
> ----
> <explorertype name="jsp" key="fileicon.jsp" icon="jsp.gif">
>     <newresource uri="newresource.jsp?newresourcetype=jsp" order="50" 
> autosetnavigation="false" autosettitle="false" info="desc.jsp" />
>      <accesscontrol>
>         <accessentry principal="DEFAULT" permissions="+r+v"/>
>         <accessentry principal="ROLE.DEVELOPER" permissions="+r+v+w+c"/>
>         <accessentry principal="GROUP.Guests" permissions="-r-v-w-c"/>
>      </accesscontrol>
> ----
> 
> here +c means can create new jsp files.
> and -c means the principal is not allowed to create new jsp files.
> 
> HTH
> -------------------
> Michael Moossen
> 
> Alkacon Software GmbH  - The OpenCms Experts
> http://www.alkacon.com - http://www.opencms.org
> 
> Achim Westermann schrieb:
>> Hi Kai,
>>
>> I am just curious: Why wouldn't you let the core work on OpenCms not just be done by Alkacon as a subcontractor. Those guys really know what 
>> they are doing (and therefore fast) and keep in mind to stay generic and downward compatible enough for other customers.
>>
>> Furthermore: OK, that feature sounds good. I appreciate that you would share this. But keep in mind that Alkacon had to review your code and 
>> discuss with you... without getting any funding for this task.
>>
>> kind regards,
>>
>> Achim
>>
>>
>>
>> Schliemann, Kai wrote:
>>> Dear list,
>>>
>>> By now OpenCms just gives us the possibility to set the permission to 
>>> "write" which means a user can create, edit and delete a resource.
>>>
>>> One of our customers wants OpenCms to have a more granular permission 
>>> system.
>>>
>>> They want to split up the "write" permission into "create", "edit" and 
>>> "delete" permissions.
>>>
>>> As we are most likely going to implement this into OpenCms, we are 
>>> interested if
>>>
>>> 1.       this is a feature which would be an enhancement for all OpenCms 
>>> users and therefore should be part of a future release?
>>>
>>> 2.       anyone else thought about implementing it and wants to share 
>>> her / his experience?
>>>
>>> 3.       anyone could think of other enhancements for the OpenCms 
>>> permission system?
>>>
>>> 4.       Alkacon has plans to change the permission system in this or 
>>> another  direction?
>>>
>>>  
>>>
>>> Looking forward to interesting responses.
>>>
>>>  
>>>
>>> *Best regards*
>>>
>>> _________________________________________
>>>
>>>   
>>>
>>> *Kai Schliemann*
>>>
>>> Senior IT-Berater
>>>
>>>    
>>>
>>> *comundus GmbH*
>>>
>>> Schüttelgrabenring 3, D-71332 Waiblingen
>>>
>>> Telefon +49 7151-50028-0
>>>
>>> E-Mail k.schliemann at comundus.com <mailto:g.maas at comundus.com>
>>>
>>> Internet www.comundus.com <http://www.comundus.com/>
>>>
>>>  
>>>
>>> Geschäftsführer Klaus Hillemeier  
>>>
>>> Amtsgericht Stuttgart, HRB 264290
>>>
>>>         
>>>
>>> comundus ist ein Unternehmen der IT EXCELLENCE Group
>>>
>>> _________________________________________
>>>
>>>  
>>>
>>> *service***
>>>
>>> 	
>>>
>>>  
>>>
>>>  
>>>
>>> Die Kundenzufriedenheit bei comundus wieder verbessert -
>>> Durchschnittsnote jetzt 1,7.
>>>
>>> * *
>>>
>>>  
>>>
>>>  
>>>
>>>
>>> ------------------------------------------------------------------------
>>>
>>>
>>> _______________________________________________
>>> This mail is sent to you from the opencms-dev mailing list
>>> To change your list options, or to unsubscribe from the list, please visit
>>> http://lists.opencms.org/mailman/listinfo/opencms-dev
>>
>> _______________________________________________
>> This mail is sent to you from the opencms-dev mailing list
>> To change your list options, or to unsubscribe from the list, please visit
>> http://lists.opencms.org/mailman/listinfo/opencms-dev
> 
> _______________________________________________
> This mail is sent to you from the opencms-dev mailing list
> To change your list options, or to unsubscribe from the list, please visit
> http://lists.opencms.org/mailman/listinfo/opencms-dev
> 
> _______________________________________________
> This mail is sent to you from the opencms-dev mailing list
> To change your list options, or to unsubscribe from the list, please visit
> http://lists.opencms.org/mailman/listinfo/opencms-dev
> 
> 
> ------------------------------------------------------------------------
> 
> 
> ------------------------------------------------------------------------
> 
> 
> _______________________________________________
> This mail is sent to you from the opencms-dev mailing list
> To change your list options, or to unsubscribe from the list, please visit
> http://lists.opencms.org/mailman/listinfo/opencms-dev