Apologies, I inadvertently added my question below to another thread. Here is my question again, hopefully this time in its own thread.
Philip ---------------- I am working on a site which will have multiple users. I would like it to be organised so that when a user logs in they can create new posts and manage their own posts but not see at all the posts of all the other users. The paragraph below (in particular the second sentence) from this page <http://wiki.habariproject.org/en/Permissions> made me think I could achieve this quite simply: "For example, if you have permission to read, edit, delete, and create your own posts, but the deny permission is set on the Permissions to posts of type "entry", you will not be able to access posts of type "Entry", no matter who created them originally. This behavior is useful, if, for example, you create a group entry_authors, whom you want to be able to create and edit their own entries, but whom you do not want to be able to access pages, or edit or delete entries written by other authors. Give the group create, edit, and read permissions on Permissions on one's own posts, and set the deny permission on Posts of type "entry". Note that in this example the entry_authors group will not be able to delete their own posts because the delete permission has not been set on Permissions on one's own posts." For "Permissions on one's own posts" I have "read, edit, delete, create" all checked. If I have "deny" checked for individual content types, as suggested above, the content types disappear from the New and Manage submenus, so I can't see how a user can then "create and edit their own entries"? For "Permissions to all posts" if I have "read" unchecked, I get an error: "Warning: PDOStatement::execute(): SQLSTATE[HY093]: Invalid parameter number: number of bound variables does not match number of tokens in system/classes/databaseconnection.php line 271"; if I have "create" unchecked, the "New" entry disappears from the Dashboard. If I have "read" and "create" checked, then I have the correct behaviour inasmuch as a user cannot modify another user's posts, but everyone's posts are listed (under "Mange entries" or "Manage pages") and ideally I would like just the user's own posts to be listed. Am I misunderstanding how this should work? Philip ---------------- -- To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/habari-dev
