Re: [Slashcode-development] ACLs for slashcode

[Alvaro d. C. <ac...@ba...>]

Hi!

> Yeah, I was thinking about something very similar at one point, and think
> this is a nice idea.  I wonder, though, if maybe users_param would be a
> better user of this?  So instead of:
> 
> >mysql> select op_insert_index from users_acl where uid=45;
> 
> You would have:
> 
>   select value from users_param where uid = 45 and name = 'op_insert_index';

Yes, i have looked to this table and it is perfect for the use we are
doing
of users_acl. But the name and value fields must be bigger. A user can
have
lots of sections in wich it can do some operations. I don't know if
when you designed the table you have in mind params so large.

> 
> Or, alternatively, implement users_acl _as_ a param-style table.  The
> problem, of course, is that we could have dozens of types of permissions,
> and it is easier to just insert a new value than it is to change the schema
> each time you want to add a new one (and this would make it more easily
> extensible via the admin interface, too).  Also, a table with a few dozen
> fields could be slower and more bloated.

Yes, thinking in the users_param table it is more flexible than the
actual
users_acl which needs to be altered each time a new permissions is
created. With the users_param table the things are more flexible and as
you say, it makes more easy to create new type of permisssions from
the admin interface.

At the moment we use the ACLs to control only sections. We create a new 
section and then, we give ACL op_admin_index to some users. This users
then can give the ACLs op_admin_index, op_insert_index or
op_delete_index
to other users. This "admin" users have the control over the index and
they
can work on in an independent way from the main editors.

Other example is when a user creates her MySlash, it is created
automatically
a new section for her stories and the user receives the op_admin_index
ACL
over her new section. Then, the user can works in the section and can
give ACLs for other users. ACLs enable a very decentralized way of work
so you can give more power to the community.

Bye

-- Alvaro
> 
> --
> Chris Nandor                      pu...@po...    http://pudge.net/
> Open Source Development Network    pu...@os...     http://osdn.com/
> 
> _______________________________________________
> Slashcode-development mailing list
> Sla...@li...
> http://lists.sourceforge.net/lists/listinfo/slashcode-development

-- 
===================================================
Alvaro del Castillo San Félix	ac...@ba...
Barrapunto.com