ok, users belong to one or more user groups.
user groups are mapped to a policy group a policy group is a collection of permission settings
If I got it right, the security tables are the following ones (this is an excerpt from the file '_dmSecUserDirectories.cf' of my FarCry application):
--- ps.permissionTable = "dmPermission"; ps.policyGroupTable = "dmPolicyGroup"; ps.permissionBarnacleTable = "dmPermissionBarnacle"; ps.externalGroupToPolicyGroupTable = "dmExternalGroupToPolicyGroup"; ---
Is there any ER diagram (Erwin, Visio or plain image) available for the FarCry database?
That would be great to better understand the relationships between the tables.
permissions control access to parts of the system/application
farcry comes with predefind groups for the basic security roles - sys/site admin, contribuotrs and authorisors. Assigning people to the groups will control what they can access and do with in farCry. The farCry user belongs to sysadmin and site admin - which means it can do everything.
That makes sense.
Create a new account (security -> security => create a user) and add it to (manage groups) 'contributors'. Logout then back in as the newly created user. you will notice that not all of the tabs are visable.
The next part is controlling access to portions of the site tree. Right click a navigation node and select permissions. You will see a drop down of all the policy groups. for each of the policy groups, select the state for each permission, eg. set edit to no. NOTE: 'Admin' permission is required if you want the user to be able to login into the farCry console.
I am going to try that ...
The policy group mapping to the user group gives you a many to many relationship that makes for a very flexable security model - though it seems a little over the top when you first start, if not down right confussing.
If it is a flexible security model, then it's definitely worth my time to understand it. :-)
Hope this helps.
Thanks a lot!
"it is 30 minutes away - I will be there in ten" - is that you Mr Wolf?
Great movie, Quentin rulez! :-)
--- You are currently subscribed to farcry-dev as: [email protected] To unsubscribe send a blank email to [EMAIL PROTECTED] Aussie Macromedia Developers: http://lists.daemon.com.au/
