Re: [Bodington-developers] Group creation on the fly

[Jon M. <jo...@te...>]

Alistair Young wrote:
>> if the group has no owners, how do you control who can amend the
>> group?
>>     
> it's an institutionally defined goup. No users will have access to modify
> it. It's auto populated from external programs.
>
> If anything, sysadmin may have access though it's conceivable the group is
> actually maintained via an external interface.
>
>   
You still need access control because you need 'see' access to add the 
group to an access control list.

The easiest thing is to create one resource in a administration area of 
the site and attach all the groups to that resource. That way you can 
control access to all the groups via a single access control list - i.e. 
the ACL of the resource.  The owner of the resource will be owner of the 
groups.  This is how it works at Leeds.  If you have a large number of 
groups it helps users if you can name them hierarchically in some way so 
that as you browse the groups it doesn't take so long to compile each list.

Jon