At Thu, 2 Jul 2015 13:00:32 +0200,
Ferran Jorba wrote:
> [...]
> > > Which steps, and in which order, do we have to follow?
> > 
> > You'd need to apply fireroles to roles.
> [...]
> 
> Oh, great, it works!  Thanks so much. ;-)

Well, not really.  After applying it to our production site, only
superadmin users could access those records and collections.

You wrote that «First thing is to create the groups and add people to
them», but, in fact, we don't have groups, we have roles.  After
browsing all related pages, in our 1.1.2 system and in github 1.1
branch, we don't see any group related management, except for a lonely
«list groups» page that seems obsolete, a leftover from older versions
of Invenio.

So, we did create a new role with the list of «allow groups X», «allow
groups Y», etc, that you wrote in your mail.  We added the
viewrestrcol with our collections.  The result was that all those
collections were restricted for everybody except for superadmin.  We
tried to simplify our definitions to a single role, but we didn't
succeed.

We also tried to change «allow groups X» for «allow roles X».  Again,
no luck.  Only superadmin can access those restricted collections.

Again, are we dealing with roles or groups?  Can we manage groups, in
Invenio 1.1.2?

Thanks,

Ferran

Reply via email to