[TYPO3-dev] Tsconfig Question related to the Live Workspace

[Erik Svendsen]

I think you had got faster reply in the english list.

But you can have one from me.

Yes, its possible to look out every users except users in one group from 
  Live Workspace. Haven't checked if it's possible through TSConfig (I 
suppose so), but it's easy to do through users/group.

But you have to remember that users can inherit permissions from groups, 
and one group can inherit permissions from other groups.

Main point is that the users themselves should have no permissions in 
workspace (look at he Mounts and Workspaces tab). The users which are 
publishing should belong to one group which has necessary permissions, 
all other to a group only with permissions to Draft (Edit Draft).

Here is how I put up groups on installations with workspaces and 
workflow and more than 5 - 10 users.

One group without any access to modules and content but is the owner of 
all pages and folders. Mounted at root. I call it pageaccess

Two groups, one with access to all workspaces (live), and one with only 
access to draft workspaces (draft). Both mounted to root (maybe not 
necessary).

One main editor group with proper access to content (Access Lists) and 
to whole pagetree. Pageaccess and live are subgroups to this one.

Normal user are in different groups (for instance a group for certain 
part of the organisation) which give them access to their part of the 
site(s) and access to necessary modules and field. Pageaccess and draft 
are subgroups.

So the only place I have ticked the Workspace permission boxes are in 
live (all ticked) and draft (only draft) group. Neither users and other 
groups has anything set. An user which are member of main editor group 
inherit his workspace permissions from live group. Member of normal 
usergroups inherit from draft and have no live workspace permission.

Hope this gives some help.

Regards

Erik Svendsen









Jason Alexander skrev:
> Hello all,
> 
> Just had a quick question. But can you limit or not show the Live 
> Workspace to everyone, except a certain group (say the admin group). I 
> know you can do some stuff within the User Setting Module to limit 
> groups/users and have found some posts about it. But can this be 
> achieved with Tsconfig? I'm not sure if there is a benefit to using one 
> or the other. But we are really trying to lockdown the Live Workspace. 
> We have editors that are publishing to Live without the review process.
> 
> Any suggestion would greatly help,
> 
> Jason R Alexander
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
>