[opencms-dev] OpenCms 7.5.1+: more granular permission system

[Roman Uhlig Maxity.de]

> By the way. When setting permissions on a folder, the write permission is shown twice (see screenshot). Seems to be a bug.

Looks like one of these OpenCms upgrade leftovers, which happen now and then.

We have some of these too, e.g. multiplied admin area entries of the same kind. And since our last update from 7.5.0 to 7.5.1, on one server we have a project named "Import of [xxx]", which is not deletable via the workplace. So we just welcomed it and declared it our friend. No worries, it doesn't talk much. ;)

Roman


-----Ursprüngliche Nachricht-----
Von: opencms-dev-bounces at opencms.org [mailto:opencms-dev-bounces at opencms.org] Im Auftrag von Schliemann, Kai
Gesendet: Montag, 7. Dezember 2009 14:31
An: The OpenCms mailing list
Betreff: Re: [opencms-dev] OpenCms 7.5.1+: more granular permission system

Hi Roman, hi Michael,
I meant it exactly as Roman understood it.

But Michael, I am heavily confused. 
The class CmsPermissionSet says: 
@link CmsPermissionSet#PERMISSION_CONTROL} (c) the right to set permissions of a resource

Is there some kind of double usage of the +c / -c flag?
1. when set as permission in the workplace and
2. when set in opencms-workplace.xml?

By the way. When setting permissions on a folder, the write permission is shown twice (see screenshot). Seems to be a bug.

Regards
Kai

-----Ursprüngliche Nachricht-----
Von: opencms-dev-bounces at opencms.org [mailto:opencms-dev-bounces at opencms.org] Im Auftrag von Roman Uhlig Maxity.de
Gesendet: Montag, 7. Dezember 2009 13:04
An: The OpenCms mailing list
Betreff: Re: [opencms-dev] OpenCms 7.5.1+: more granular permission system

 
Michael,

I guess he meant in the workplace, possible to define for particular folders or other resources. At least I did. ;)

Regards,
Roman


-----Ursprüngliche Nachricht-----
Von: opencms-dev-bounces at opencms.org [mailto:opencms-dev-bounces at opencms.org] Im Auftrag von Michael Moossen
Gesendet: Montag, 7. Dezember 2009 12:48
An: The OpenCms mailing list
Betreff: Re: [opencms-dev] OpenCms 7.5.1+: more granular permission system

Hi Kai, Achim!

already the permissions to create a resource can be configured 
separately in the explorer type configuration of the resource type.

for instance, here for jsp files in the opencms-workplace.jsp:
----
<explorertype name="jsp" key="fileicon.jsp" icon="jsp.gif">
    <newresource uri="newresource.jsp?newresourcetype=jsp" order="50" 
autosetnavigation="false" autosettitle="false" info="desc.jsp" />
     <accesscontrol>
        <accessentry principal="DEFAULT" permissions="+r+v"/>
        <accessentry principal="ROLE.DEVELOPER" permissions="+r+v+w+c"/>
        <accessentry principal="GROUP.Guests" permissions="-r-v-w-c"/>
     </accesscontrol>
----

here +c means can create new jsp files.
and -c means the principal is not allowed to create new jsp files.

HTH
-------------------
Michael Moossen

Alkacon Software GmbH  - The OpenCms Experts
http://www.alkacon.com - http://www.opencms.org

Achim Westermann schrieb:
> Hi Kai,
> 
> I am just curious: Why wouldn't you let the core work on OpenCms not just be done by Alkacon as a subcontractor. Those guys really know what 
> they are doing (and therefore fast) and keep in mind to stay generic and downward compatible enough for other customers.
> 
> Furthermore: OK, that feature sounds good. I appreciate that you would share this. But keep in mind that Alkacon had to review your code and 
> discuss with you... without getting any funding for this task.
> 
> kind regards,
> 
> Achim
> 
> 
> 
> Schliemann, Kai wrote:
>> Dear list,
>>
>> By now OpenCms just gives us the possibility to set the permission to 
>> "write" which means a user can create, edit and delete a resource.
>>
>> One of our customers wants OpenCms to have a more granular permission 
>> system.
>>
>> They want to split up the "write" permission into "create", "edit" and 
>> "delete" permissions.
>>
>> As we are most likely going to implement this into OpenCms, we are 
>> interested if
>>
>> 1.       this is a feature which would be an enhancement for all OpenCms 
>> users and therefore should be part of a future release?
>>
>> 2.       anyone else thought about implementing it and wants to share 
>> her / his experience?
>>
>> 3.       anyone could think of other enhancements for the OpenCms 
>> permission system?
>>
>> 4.       Alkacon has plans to change the permission system in this or 
>> another  direction?
>>
>>  
>>
>> Looking forward to interesting responses.
>>
>>  
>>
>> *Best regards*
>>
>> _________________________________________
>>
>>   
>>
>> *Kai Schliemann*
>>
>> Senior IT-Berater
>>
>>    
>>
>> *comundus GmbH*
>>
>> Schüttelgrabenring 3, D-71332 Waiblingen
>>
>> Telefon +49 7151-50028-0
>>
>> E-Mail k.schliemann at comundus.com <mailto:g.maas at comundus.com>
>>
>> Internet www.comundus.com <http://www.comundus.com/>
>>
>>  
>>
>> Geschäftsführer Klaus Hillemeier  
>>
>> Amtsgericht Stuttgart, HRB 264290
>>
>>         
>>
>> comundus ist ein Unternehmen der IT EXCELLENCE Group
>>
>> _________________________________________
>>
>>  
>>
>> *service***
>>
>> 	
>>
>>  
>>
>>  
>>
>> Die Kundenzufriedenheit bei comundus wieder verbessert -
>> Durchschnittsnote jetzt 1,7.
>>
>> * *
>>
>>  
>>
>>  
>>
>>
>> ------------------------------------------------------------------------
>>
>>
>> _______________________________________________
>> This mail is sent to you from the opencms-dev mailing list
>> To change your list options, or to unsubscribe from the list, please visit
>> http://lists.opencms.org/mailman/listinfo/opencms-dev
> 
> 
> _______________________________________________
> This mail is sent to you from the opencms-dev mailing list
> To change your list options, or to unsubscribe from the list, please visit
> http://lists.opencms.org/mailman/listinfo/opencms-dev

_______________________________________________
This mail is sent to you from the opencms-dev mailing list
To change your list options, or to unsubscribe from the list, please visit
http://lists.opencms.org/mailman/listinfo/opencms-dev

_______________________________________________
This mail is sent to you from the opencms-dev mailing list
To change your list options, or to unsubscribe from the list, please visit
http://lists.opencms.org/mailman/listinfo/opencms-dev