Re: [Bodington-developers] Testing SP : groups-xml-mapper-policy

[Matthew B. <mat...@ou...>]

Alistair Young wrote:
> ok, that's confusing now! The Group tool states:

Yeah too many sysadmins, sysadmin group, sysadmin permission, sysadmin user.

> sysadmins : System administrators for this web site
> 
>> The group with all the power is the /site owners group 
>> which by default contains sysadmin

> do you mean the sysadmin user or the sysadmins group? The Group tool 
> seems to state that adding someone to the sysadmins groups makes them a 
> sysadmin with all rights over the whole site.

With the default database setup that is incorrect (and looking at the 
DemoSiteBuilder it seem that is the same). The sysadmin group has 
permissions on no extra resources.

> So whether they end up in 
> the sysadmins group via the Group tool or the shibb auth shouldn't make 
> any difference. But it does for some reason.

Sysadmin group has no extra permissions.

I suspect that this may have changed because of Zones as you may have 
several sysadmins but not all of them have sysadmin rights to the whole 
site.

-- 
  -- Matthew Buckett, VLE Developer
  -- Learning Technologies Group, Oxford University Computing Services
  -- Tel: +44 (0)1865 283660 http://www.oucs.ox.ac.uk/ltg/