Re: [Zope-dev] Wild and crazzzzy idea: Hierarchial permissions

2001-12-05 Thread Adrian Hungate

Limiting the list of products in the Add Object list can be done currently
using my PatchKit product - http://www.zope.org/Members/haqa/PatchKit

(It does some other stuff too)

Adrian...
- Original Message -
From: "Oliver Bleutgen" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, November 22, 2001 12:22 PM
Subject: Re: [Zope-dev] Wild and crazzzzy idea: Hierarchial permissions


Lennart Regebro wrote:

> The list of permissions is getting quite long. It's the basic permissions
of
> Zope, plus the ones for our CM system. And we haven't even integrated CMF
> with it (which we may or may not do in the future).
>
> To make things easier to find we have names all our permissions "Easy
> ". I then got the idea that the permission list could be
> hierarchial or filtered or grouped or something. All permissions would
have
> another setting to specify it group. That way the Zope base permissions
> could be grouped together into a "Zope Base" persmission group. We could
> group our in an "Torped Easy Publisher" permission group, and so on.
>
> Good idea or stupid?

Well, for your use you could just hardcode some permission "groups" and
include them in the dtml-file which resembles zopes security screen.
A little bit javascript and selecting one of your groups would
automagically be checked when you check one of your groups.

What I'm missig more is flexibility for the "Add object" mechanism.
The possibility to install products not globally, but locally for a
folder and it's subfolders and some hierachical sorting of "add type"
selectbox.
Perhaps the tree could be (ab-)used to get a structure like

+ text product
- DTML Document
- DTML Method
+ Images, Files
- Image
- File
+ SQL Stuff
- ZSQL Method
- PoPy Database Connection
- Search Interface

etc

To get back to the topic, perhaps your wishes and mine could be
combined: A permissions group for "edit text products" which would
automatically select the right permissions.

cheers,
oliver





___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists -
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



Re: [Zope-dev] Wild and crazzzzy idea: Hierarchial permissions

2001-11-23 Thread Joachim Werner

> What I'm missig more is flexibility for the "Add object" mechanism.
> The possibility to install products not globally, but locally for a
> folder and it's subfolders and some hierachical sorting of "add type"
> selectbox.

Hi!

With OrderedFolder, you can at least clean up the Add menu locally. That
might help for a lot of situations. It is not creating tree views yet, but
it's a start ...

Joachim


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



Re: [Zope-dev] Wild and crazzzzy idea: Hierarchial permissions

2001-11-22 Thread Oliver Bleutgen

Lennart Regebro wrote:

> From: "Oliver Bleutgen" <[EMAIL PROTECTED]>
> 
>>Well, for your use you could just hardcode some permission "groups" and
>>include them in the dtml-file which resembles zopes security screen.
>>A little bit javascript and selecting one of your groups would
>>automagically be checked when you check one of your groups.


Ups, my last sentence here is astonishing hard to parse ;-).


>>
> 
> True, good idea. If the list gets too big (we are not there yet) we might do
> this.
> But it would be nice to have general support for it. Unless somebody scream
> I'll make a proposal.


But I see you understood anyway.

> 
> 
>>What I'm missig more is flexibility for the "Add object" mechanism.
>>
> 
> Yeah, that would be nice too. It's not any problem for us, since only
> managers get to see many objects to add, but I wouldn't complain if the
> feature was there. :-)
> 
>>To get back to the topic, perhaps your wishes and mine could be
>>combined: A permissions group for "edit text products" which would
>>automatically select the right permissions.
>>
> 
> Hmmm... So you mean that the group is a permission too, that sets all of the
> permissions in the group?
> Thats not what I was thinking about at all, but it might be a good idea

Not really a permission, it perhaps just could give the information on 

how the security ZMI page would build these "one-click - multi-permissions" 

checkboxes.

cheers,
oliver





___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



Re: [Zope-dev] Wild and crazzzzy idea: Hierarchial permissions

2001-11-22 Thread Lennart Regebro

From: "Oliver Bleutgen" <[EMAIL PROTECTED]>
> Well, for your use you could just hardcode some permission "groups" and
> include them in the dtml-file which resembles zopes security screen.
> A little bit javascript and selecting one of your groups would
> automagically be checked when you check one of your groups.

True, good idea. If the list gets too big (we are not there yet) we might do
this.
But it would be nice to have general support for it. Unless somebody scream
I'll make a proposal.

> What I'm missig more is flexibility for the "Add object" mechanism.

Yeah, that would be nice too. It's not any problem for us, since only
managers get to see many objects to add, but I wouldn't complain if the
feature was there. :-)

> To get back to the topic, perhaps your wishes and mine could be
> combined: A permissions group for "edit text products" which would
> automatically select the right permissions.

Hmmm... So you mean that the group is a permission too, that sets all of the
permissions in the group?
Thats not what I was thinking about at all, but it might be a good idea




___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



Re: [Zope-dev] Wild and crazzzzy idea: Hierarchial permissions

2001-11-22 Thread Oliver Bleutgen

Lennart Regebro wrote:

> The list of permissions is getting quite long. It's the basic permissions of
> Zope, plus the ones for our CM system. And we haven't even integrated CMF
> with it (which we may or may not do in the future).
> 
> To make things easier to find we have names all our permissions "Easy
> ". I then got the idea that the permission list could be
> hierarchial or filtered or grouped or something. All permissions would have
> another setting to specify it group. That way the Zope base permissions
> could be grouped together into a "Zope Base" persmission group. We could
> group our in an "Torped Easy Publisher" permission group, and so on.
> 
> Good idea or stupid?

Well, for your use you could just hardcode some permission "groups" and
include them in the dtml-file which resembles zopes security screen.
A little bit javascript and selecting one of your groups would 
automagically be checked when you check one of your groups.

What I'm missig more is flexibility for the "Add object" mechanism.
The possibility to install products not globally, but locally for a 
folder and it's subfolders and some hierachical sorting of "add type" 
selectbox.
Perhaps the tree could be (ab-)used to get a structure like

+ text product
- DTML Document
- DTML Method
+ Images, Files
- Image
- File
+ SQL Stuff
- ZSQL Method
- PoPy Database Connection
- Search Interface

etc

To get back to the topic, perhaps your wishes and mine could be 
combined: A permissions group for "edit text products" which would 
automatically select the right permissions.

cheers,
oliver





___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



Re: [Zope-dev] Wild and crazzzzy idea: Hierarchial permissions

2001-11-22 Thread Leon De Heus

I like the idea of having the permissions grouped in the management
screen :-)

Best,
Leon de Heus

Op Thu 22-11-2001, om 11:56 schreef Lennart Regebro:
> The list of permissions is getting quite long. It's the basic permissions of
> Zope, plus the ones for our CM system. And we haven't even integrated CMF
> with it (which we may or may not do in the future).
> 
> To make things easier to find we have names all our permissions "Easy
> ". I then got the idea that the permission list could be
> hierarchial or filtered or grouped or something. All permissions would have
> another setting to specify it group. That way the Zope base permissions
> could be grouped together into a "Zope Base" persmission group. We could
> group our in an "Torped Easy Publisher" permission group, and so on.
> 
> Good idea or stupid?
> 




___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )



[Zope-dev] Wild and crazzzzy idea: Hierarchial permissions

2001-11-22 Thread Lennart Regebro

The list of permissions is getting quite long. It's the basic permissions of
Zope, plus the ones for our CM system. And we haven't even integrated CMF
with it (which we may or may not do in the future).

To make things easier to find we have names all our permissions "Easy
". I then got the idea that the permission list could be
hierarchial or filtered or grouped or something. All permissions would have
another setting to specify it group. That way the Zope base permissions
could be grouped together into a "Zope Base" persmission group. We could
group our in an "Torped Easy Publisher" permission group, and so on.

Good idea or stupid?



___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )