DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://issues.apache.org/bugzilla/show_bug.cgi?id=42952>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=42952 ------- Additional Comments From [EMAIL PROTECTED] 2007-07-30 07:38 ------- (In reply to comment #9) > (In reply to comment #7) > > > > no. all users would have to be members of one group "users", and this > > > group is > > > then granted the role of "visit" to the authoring subtree. > > > > > > > This is what I do. When a new user is created it is put into my custom visit > > group automatically (I have my own auth module). That group is given visit > > permission on the authoring node from the site tree when I set the publication up. > > richard, can you share your code? i'd like to tackle this issue, and iiuc the > most user-friendly way is to introduce such a default group right away... > but i'd be more relaxed about it if i had your proven code to peek at. maybe > we > can even use it as is? wdyt? Under doExecute() of AddUser this is what I have: User user = new KerberosUser(getUserManager(),ldapId, getLogger()); ContainerUtil.enableLogging(user,getLogger()); user.setDescription(description); //user.save(); getUserManager().add(user); Group group = getGroupManager().getGroup("visitor"); group.add(user); user.save(); setExitParameter(USER_ID, ldapId); The publication which all of my other publications extend from has the group of visitor which has the visit role on the authoring tree. The problem I ran into is that if a user had only edit, admin, or review roles on a subset of the tree, they ran into major permission issues. This does assume that anyone with a login is allowed to see all of the authoring content. In my deployments, this is just fine. And yes, I know I should be using a constant for my group name. I need to go through and clean this code up yet. -- Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
