On Tue, Oct 14, 2008 at 4:37 PM, Owen Winkler <[EMAIL PROTECTED]> wrote:
>
> We need to start applying permissions to areas that should be restricted.
>
> There are three immediate concerns:
>
> 1) What are the permissions required for each section of the admin? In
> particular note that every permission can be both a token and an access
> level, such as ("publish" and "read") or ("publish" and "write").
>
I will try to list some of the suggestec core tokens I can think of on the
top of my head.
Also, I am assuming that write includes editing, deleting and changing the
status of the item. These might be re-decided later though. I suggest to
have tokens for the whole admin pages as well. If this token is set, the
access level should override the ones of the child elements if the latter
would grant more access. Or something.
Create Entry
Create Page
Manage Entries
Own entries
Others' entries
Manage Pages:
Own pages
Others' pages
Comments
Comments on own posts.
Comments on others' posts.
Tags
Options
Themes
Change theme
Configure active theme
Plugins
Activate plugins
Deactivate plugins
Configure active plugins
Import
Users
Edit own user account.
Groups
Logs
2) How will we upgrade users in existing installations to have
> permissions so that they're not locked out entirely?
Andrew's suggestion looks valid, though not awfully secure I must add.
Although it's not likely, but it's a valid case that one of the other users
who already have access to the Habari installation can hijack it during the
upgrade process. But current users in Habari are all admins, so I don't
think it would be a problem to set the user considering that fact.
>
>
> 3) Anyone willing to contribute a solid graphical concept for the group
> and permission management page should do so now, or I'll do it and it'll
> be the ugliest thing in the admin.
>
> Owen
>
> >
>
--
Ali B / dmondark
http://www.awhitebox.com
--~--~---------~--~----~------------~-------~--~----~
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at http://groups.google.com/group/habari-dev
-~----------~----~----~----~------~----~------~--~---
