Can you propose a way of doing this while keeping backward compat for existing code relying on the current behavior?

Florent

On 16 Jun 2009, at 16:51, Olivier Adam wrote:

Hi all

+1 with Raymond

The "Read" permission should'nt include the "CanAskForPublishing" permission.

We need to add the "CanAskForPublishing" permission only for the publishers, not for all users that have only the "Right" to read (the readers).

The "ReadWrite" permission is attributed to the validators. It sould include the "CanAskForPublishing" permission.

Olivier




Catalin Baican a écrit :
Hi, Raymond

The things you're pointing out were the subject of this task: http://jira.nuxeo.org/browse/NXP-3331 . So "CanAskForPublishing" permission was included in "Read" permission in order for a user which has "Read" persmission for a section to be able to ask for publication in that section. And also, if a user doesn't have "Read" persmission for a section, but has "CanAskForPublishing" permission for it, she'll be able to ask for publication even she doesn't have "Read" permissions.

C.

Raymond Bourges wrote:
Hi,

I have some tests with Nuxeo DM 5.2.

By default, a user is authorized to read "Sections".

As CanAskForPublishing permission is included in Read permission, any user can request to publish!

I don't understand what is the usefulness of having ability to assign CanAskForPublishing permission on sections as I must at least have the Read permission for navigating in sections where I want to publish.

In my point of view, this seems better:

1) The code (getCanPublishToSection function) that displays (or not) the "publish here" button is displayed if user has the CanAskForPublishing permission OR write permission (and not just CanAskForPublishing as now).

2) Read permission should not include the CanAskForPublishing permission.

What do you think about this?

Thanks.
_______________________________________________
ECM mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm
To unsubscribe, go to http://lists.nuxeo.com/mailman/options/ecm


_______________________________________________
ECM mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm
To unsubscribe, go to http://lists.nuxeo.com/mailman/options/ecm

<olivier_adam.vcf>_______________________________________________
ECM mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm
To unsubscribe, go to http://lists.nuxeo.com/mailman/options/ecm

--
Florent Guillaume, Head of R&D, Nuxeo
Open Source, Java EE based, Enterprise Content Management (ECM)
http://www.nuxeo.com   http://www.nuxeo.org   +33 1 40 33 79 87

_______________________________________________
ECM mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm
To unsubscribe, go to http://lists.nuxeo.com/mailman/options/ecm

Reply via email to