Hello Nico,

Do you still have the demo and is there a possibility that I can take a
look at it?

Kinds regards,
Joris van Poppel

-----Oorspronkelijk bericht-----
Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Namens Nico Klasens
Verzonden: 03 July 2004 17:53
Aan: [EMAIL PROTECTED]
Onderwerp: RE: WIAB


> >Some time ago, I extracted the remote publishing code of
> wiab and put
> >it aside for testing. I have used the code in some project
> so I guess
> >it is back at the same stable level as it was in wiab. I could email
> >you the code if you want. I might add this code to the
> MMBase cvs when
> >I have some time and a internet connection available (I am
> now behind
> >very well maintained firewalls).
> 
> Hi Nico,
> 
> Have you loked at the possibility to use workflow/node cloning on a
> single mmbase cloud using security to hide the data on the frontend?

Yes, I did. A couple of months ago, I made a small demo for a customer
to show what was possible with workflow. You can use the cloud context
security model with one publish context for the anonymous user.

With workflow you have to make a difference betweeen workflow security
and object security. 

Object security: is this user allowed to read/write/delete/link the
object? 
workflow security: is this user allowed to write/delete/link the content
element when it is in state draft/finished/approved/published?

The first security is about objects and the second one about content
elements. Content elements are objects, but an object is not always a
content element. A site has administrative objects (users, jumpers,
properties, emailqueues) to implement features. In my view, MMBase is a
content engine which stores and retrieves objects. It does not have a
clue what a content element is. Logically, MMBase can only do object
security. Other CMSes know the difference, but they define which
administrative objects are available.

Web-In-A-Box has workflow security. It defines which content types are
content elements. A block of content elements can have a workflowitem
attached to it. The workflowitem is attached to one content element and
the other content elements have relations to that content element.
Web-In-A-Box is from the days that there was no decent per object
security. As you know, hiding the data with a context was not possible.
The multi-cloud solution is a good option. Now the context security is
good in per object security. WIAB does a remote cloud publishing
operation at the end of the workflow, but this could also be a ccontext
change. It does not even take a lot of time to do that I guess.

I still prefer the multi-cloud solution, because then the object
security can be used for editor authorization on objects in the staging
cloud. Some time ago, at a brainstorm session at Finalist, we came up
with an idea to run multiple wiab ionstances in one mmbase cloud. Every
instance would get his own context. The live cloud could run without any
security, because that contains only published content. The frontend
will be very fast and you can guarantee in the staging cloud that nobody
can alter the objects of another wiab instance.

Nico Klasens

---------------------------------------------------------------
My programs never have bugs, they just develop random features.





Reply via email to