[opencms-dev] Permission problem with ADE content structure

[Schliemann, Kai]

Hi Tobias,
I think the only way to solve this issue is to create subsitemaps for each area and save the container there like
/en/press/.content/container/
and
/en/hr/.content/container/

This approach of course has the disadvantage, that you can't share contents between those areas.

HTH
Best regards
Kai

-----Ursprüngliche Nachricht-----
Von: opencms-dev-bounces at opencms.org [mailto:opencms-dev-bounces at opencms.org] Im Auftrag von Tobias Karrer
Gesendet: Dienstag, 11. November 2014 18:36
An: The OpenCms mailing list
Betreff: [opencms-dev] Permission problem with ADE content structure

Hi all!

As far as I can see, introducing ADE created a big permission problem, which we didn't get solved by now satisfactorily.

Let's say we use resources of type "container" for editing content on pages.
So all Editors need to have write permission for folder "/.content/container/". Further there are two Editor Groups which have the right to edit different areas, e.g. two container-pages with a reference to the containers above:

/.content/container/ - Permissions: Editors Press (+r+w+v), Editors HR
(+r+w+v)
     /c_00001.html
     /c_00002.html

/en/press/index.html - Permissions: Editors Press (+r+w+v)
     -> c_00001.html

/en/hr/index.html - Permissions: Editors HR (+r+w+v)
     -> c_00002.html

Finally, Editors Press won't be able to add or remove content in /en/hr/ and vice versa, but they will be able to edit content of c_00002.html (as they have +w on all containers).

I think the correct behaviour would be, that users must not be able to edit containers, which are included in container-pages they don't have the right to edit (or at least no until container is included in one container-page they have the right to edit)

Someone already solved this problem?

@Alkacon: You never stumbled across this problem?

Best regards,
Tobias
_______________________________________________
This mail is sent to you from the opencms-dev mailing list To change your list options, or to unsubscribe from the list, please visit http://lists.opencms.org/cgi-bin/mailman/listinfo/opencms-dev