Child pages
  • Admin Section for Permissions Management
Skip to end of metadata
Go to start of metadata

Imported From: http://groups.google.com/group/in-portal-dev/browse_thread/thread/c80a6371a8192071#

I think we are missing such thing as a Section where we can manage (add / edit / delete) the system permissions which are later are used to check if User can do the action.

It should be simple list/grid of all Permissions probably under Configuration->Website->Advanced section.

What do you think and if any specific or complications here? By the way, I think we should have all Prefixes in place for this already?

Related Tasks

INP-725 - Getting issue details... STATUS

15 Comments

  1. *I think we are missing such thing as a Section where we can manage (add /
    edit / delete) the system permissions which are later are used to check if
    User can do the action.*

    Are you talking about "User Management -> Groups -> [Edit Group] ->
    [Permissions tab]" section, that we are missing?

  2. No, I am talking about the ability to DEFINE and MANAGE actual
    permission Names which will be used down on the road by our current
    Permissions System.

    It will live under Configuration->Website->Advanced->Permissions
    section (or better name).

    DA

  3. Maybe you are talking about category-based permission, since we got:

       - section permissions (for admin tree sections)
       - category permissions (for items inside categories)

    We can't create create a section for managing section permissions, since
    each unit has it's own sections with their own permissions.

  4. No, you missed again.

    As far as I know we can manage all out actual permission settings just
    fine.

    What we can NOT do via Admin is add/edit/delete a new Permission type.
    I believe we've talked about this before. This topic was kind of
    related to Phil's started discussion about the permissions.

    http://groups.google.com/group/in-portal-dev/browse_thread/thread/9fb2c6158ab20520

    I guess, I would call it Configuration->Website->Advanced->Permission
    Types . It mostly will be used by Developers only - now we do it by
    hand and it's a pain...

    DA.

  5. In that discussion was c_HasPermission tag, and "c" is category, and it is
    used category-based permissions.

    No need to add new admin-section based permissions, like
    "in-portal.users_list.advanced:my_custom_permission", but adding permission
    "CATEGORY.CUSTOM_PERMISSION_NAME".

  6. Bingo!

    How you can manage Permission Types like
    CATEGORY.CUSTOM_PERMISSION_NAME now?

    Section to be able to manage all this.

    Do you understand my point? Do you agree?

    DA.

  7. Pretty simple section, since we already got table PermissionsConfig. We just
    need to create unit and templates to allow data entry in that table.

    Also we need to add "System" column there to prevent any permissions, that
    we already have now from being deleted.

  8. Agreed on new Column!

    What about Section name?

    Configuration->Website->Advanced: Permission Types ?

    DA.

  9. Configuration->Website->Advanced - is a section already with configuration
    variables in it. Would you add new 4th sub-level in it. Maybe
    Configuration->Website->Permission
    Types would be enough?

  10. Yes, please!

    Actually, I meant to put - "Configuration->Website->Permission Types", but
    blanked out for some reason and put Advanced there too :)

    DA.

  11. sounds really good... and it could be used as a trick to overcome the
    unability to check user's group ;-)

    2010/10/22 Dmitry Andrejev <dandre...@gmail.com>

  12. New task for this feature request has been created:

    898: Admin Interface for managing "Permission Types"

    INP-725 - Getting issue details... STATUS


    DA

  13. Hi Alex,

    I think we should consider this task for 5.2.0 - I think it's quite easy to
    do and will be a big help for developers.

    What's your opinion on this?

    DA

  14. Yes. This surely would give simple user an advantage, since he now can
    manually create new category permissions and check/set them where needed.

    On Sun, Sep 25, 2011 at 6:32 AM, Dmitry A. <dandre...@gmail.com> wrote:
    > Hi Alex,

    > I think we should consider this task for 5.2.0 - I think it's quite easy to
    > do and will be a big help for developers.

    > What's your opinion on this?

    > DA