[Typo3-dev] More advanced permissions handling?

[Ries van Twisk]

Hey,

we are going to make a extention for a more advanced permission system 
since we also need more
advanced permissions in our extentions.

We are properly going to use the one that is used in openphpnuke but 
everything is still on the drawing board and
we need to look at what's available more nowdays...

Ofcourse we are not going to change the existing extentions and/or core 
but for our own extentions we are going
to make.

cheers,
Ries

Stig Nørgaard Færch wrote:

>Hi all, and a HAPPY NEW YEAR!
>
>When defining a be-group, it would be very very nice if there were an option
>to only let the permissions be true for that be-groups selected db-mounts.
>
>An example:
>
>You have two BE-groups.
>The first one has a DB-mount on 'page one'.
>And permissions to list/modify on Pagecontent AND News.
>
>The second one has a DB-mount on 'page two'.
>This groups also have permissions to list/modify on Pagecontent but NOT on
>News.
>
>Now I would like to give the user 'Kasper' these two groups.
>The essential is that I would now expect 'Kasper' NOT to be able to
>list/modify News-items on 'page two'. But this is unfortunately not the
>case.
>It seems like you set the permissions globally, so everything you allow for
>the first be-group will also be allowed for the second.
>
>As far as I can see, this is also the case for Explicitly allow/deny fields.
>
>Am I expecting too much? :-)
>
>
>Another thing also related to permisssions:
>I sent a post about this before on the english list. But there were no
>replys, so I guess this is the list instead.
>
>You have several be-users, some of which will only be allowed to edit one 
>to few pages.
>
>Now I thought it would be nice if these users would be able to give 
>other be-users permissions to edit a single page (or several for that
>matter). This could be handy during hollydays, so that a page still would
>be updated.
>This could be a permission only for a limited time or one which the user
>could cancel after some time.
>
>Would this be possible without consulting the admin?
>
>And is this only done by:
>1)making a be-group for this page
>2)select that be-group on the page (access-module)
>3)give the other be-user rights to that be-group and give him a db-mount 
>to the page.
>
>Now as I see it, all this needs to be done by an admin.
>(2)I wondered if the owner of the page could select a be-group for his 
>page, but it doesn't seem like it.
>
>Now this one would just be a really nice feature, but the other one would be
>a very very very nice feature.
>
>/Stig
>_______________________________________________
>Typo3-dev mailing list
>Typo3-dev at lists.netfielders.de
>http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev
>  
>


-- 
R. van Twisk
http://www.metamorf.net

Our Typo3 enabled website: http://www.livetravelguides.com
Instand help for Typo3?    irc:/irc.freenode.net/typo3
Looking for documentation? http://typo3.org/documentation/