At Thu, 2 Jul 2015 13:00:32 +0200, Ferran Jorba wrote: > [...] > > > Which steps, and in which order, do we have to follow? > > > > You'd need to apply fireroles to roles. > [...] > > Oh, great, it works! Thanks so much. ;-)
Well, not really. After applying it to our production site, only superadmin users could access those records and collections. You wrote that «First thing is to create the groups and add people to them», but, in fact, we don't have groups, we have roles. After browsing all related pages, in our 1.1.2 system and in github 1.1 branch, we don't see any group related management, except for a lonely «list groups» page that seems obsolete, a leftover from older versions of Invenio. So, we did create a new role with the list of «allow groups X», «allow groups Y», etc, that you wrote in your mail. We added the viewrestrcol with our collections. The result was that all those collections were restricted for everybody except for superadmin. We tried to simplify our definitions to a single role, but we didn't succeed. We also tried to change «allow groups X» for «allow roles X». Again, no luck. Only superadmin can access those restricted collections. Again, are we dealing with roles or groups? Can we manage groups, in Invenio 1.1.2? Thanks, Ferran

