Re: [Exist-open] Customizing permissions system - Is this crazy?

[Dmitriy S. <sha...@gm...>]

On Fri, 2010-02-26 at 10:41 -0500, Casey Jordan wrote:
> So "Invitation Style Permissions" would allow one user to invite
> another user to view/edit file outside of the regular unix style
> permissions. It would be an extension of the regular permissions
> system. Google docs uses this style permissions system.
> 
> It seems to me that it would be very easy to add this functionality to
> the validate() function in eXist. I just need to know if this is the
> best way to do it, and if there would be significant effects on the
> system ( efficiency, etc )

The simplest solution I see (without redesign or coding) it unique group
per resource. By adding or removing user to/from that group you will
control access to resource in "share mode". Only problem is permissions
will be same for sharers.

Another solution is XACML & I ready to help with that.

-- 
Cheers,

Dmitriy Shabanov