> Does this make sense? I feel like e verybody understands
> what's going on except me ;-(
I think I agree with you. I would also like to see a mapping
that better reflected the following scenario:
* A site may be running multiple apps.
* A user may have different permissions (roles) in each app.
I believe the idea of a user group (or team) is just an
artifact (albeit a useful one) to simplify administration.
Perhaps we should think of these groups in terms of
profiles, so that:
* A profile is a set of permissions with a name.
* A user may have several profiles in each app.
So:
* USER is associated with a person actually hitting pages.
* APP or SYSTEM is a group of related pages.
* ROLE or PERMISSION is the ability to perform an atomic activity.
* PROFILE is a set of ROLEs with a name.
* A tuple <user,app,profile> means that user has all the
roles in that profile when hitting pages in that app.
Maybe this should be extended to allow for one page to belong
to more than one app?
> fedor.
--
Gonzalo A. Diethelm
[EMAIL PROTECTED]
------------------------------------------------------------
To subscribe: [EMAIL PROTECTED]
To unsubscribe: [EMAIL PROTECTED]
Search: <http://www.mail-archive.com/turbine%40list.working-dogs.com/>
Problems?: [EMAIL PROTECTED]
