[Typo3-dev] More advanced permissions handling?

[Stig Nørgaard Færch]

Kasper Skårhøj wrote:

> Hi Stig,
> 
> happy newyear.
> 
>> his is also the case for Explicitly allow/deny fields.
>> 
>> Am I expecting too much? :-)
>> 
> 
> 
> Yes, it will be far to complicated to implement and one should keep a
> permission system simple.

Okay, it might be too complex to do this.
But then I have a couple of ideas which might be easier to implement?
I would like to hear...:
...if you think it's a good idea?
...if you think it would contradict some basic designrules of Typo3?
...how hard it would be to implement?
...if you might implement it sometime?
...if not, do you think it would be possible to implement through an
extension?

The first idea:
The idea is that when you are logged in, you will be able to choose among
different user-roles which corresponds to be-usergroups you were assigned.

For example - you might want to edit news. Then you select the news-role and
only the be-usergroup for news-editing kicks in.

Or you might want to edit the calendar then you select calendar-role and
only the be-usergroup for calendar-editing kicks in.

To select a user-role, you could have a dropdown-list in the BE with the
different user-roles you can switch through, one of which is default.


Or another idea:
Similar to the above idea.
You can mark be-users as being user-roles.
Then these user-roles could be assigned to be-users,
who then can switch between these in the BE from a dropdown-list.

The problem might be that it's not the be-user who sets it's mark when
editing something but the user-role instead. But that might also be
solvable.

/Stig