let's explain.

The book talks in auth_permission about 'object' as a generic subject of
permissions.


I think this as controller or a part of application, or group of functions
you want to grant permissions.


While a user is member of a group, a permission subject/object can granted
to several groups.

In a app, you can have three groups: admin, managers and users.

users can have permissions to create and update functions/controllers
admin and managers only can delete and see report functions.
admin only can access site management controllers.

Permissions can be granted to several groups, It can be used not only to
tables, but to sections/controllers/functions: user, datamaintenance,
reports, sitemanagement,

A workaround is break the groups into smaller scope, mimic permissions,  and
assign several groups to a user, but its not the best option:

user, datamaintenance, reports, sitemanagement, etc.

My desire is REMOVE the table-only aspect of permissions, making them
optional, like described in the book. The concept is perfect as is.

The fact is web2py doesn't work as described in the book.






2010/10/13 mdipierro <[email protected]>

> Not sure I understand the problem. Can you provide a test case and
> what you expect?
>
> On Oct 13, 5:07 pm, Alexandre Andrade <[email protected]>
> wrote:
> > The book says about auth_permission:
> >
> > auth_permission links groups and permissions. A permission is identified
> by
> > a name and, optionally, a table and a record. For example, members of a
> > certain group can have "update" permissions on a specific record of a
> > specific table.
> >
> > But in 1.87.2, Its requires a table to works. its limits the use of
> > permissions, while make easy when it applies to a table.
> >
> > I think it was enforced to make the form easier, but its not cool.
> >
> > What I can expect? Fix to work optionally with tables, or I will have to
> > manage my own solution?
> >
> > Atenciosamente
> >
> > --
> > =========================
> > Alexandre Andrade
> > Hipercenter.com
>



-- 
Atenciosamente

-- 
=========================
Alexandre Andrade
Hipercenter.com

Reply via email to