Tres Seaver wrote:
A fairly drastic one, unfortunately -- catalog all role and permission
assignments and run a query as soon a user is removed.
CMF does this for local roles, and Jim is already on record as disliking
it.
I am pleased with the *result*, which also allows the catalog to filter
"normal" content results efficiently based on the user's roles (the
original eason for the index). OTOH, the *implementation* is grotty.
FYI in addition to the CMF 'allowedRolesAndUsers' index that Tres is
alluding to her, in CPS we added an index 'localUsersWithRoles' exactly
for the use case of being able to find quickly where someone (or some
group) has a local role, to be able to remove it.
Florent
--
Florent Guillaume, Nuxeo (Paris, France) Director of R&D
+33 1 40 33 71 59 http://nuxeo.com [EMAIL PROTECTED]
_______________________________________________
Zope3-dev mailing list
Zope3-dev@zope.org
Unsub: http://mail.zope.org/mailman/options/zope3-dev/archive%40mail-archive.com
