Re: [Bodington-developers] Group creation on the fly

[Alistair Y. <ali...@sm...>]

that makes sense, thanks for that Jon

--=20
Alistair Young
Senior Software Engineer
UHI@Sabhal M=F2r Ostaig
Isle of Skye
Scotland

> Alistair Young wrote:
>>> if the group has no owners, how do you control who can amend the
>>> group?
>>>
>> it's an institutionally defined goup. No users will have access to
>> modify
>> it. It's auto populated from external programs.
>>
>> If anything, sysadmin may have access though it's conceivable the grou=
p
>> is
>> actually maintained via an external interface.
>>
>>
> You still need access control because you need see access to add the
> group to an access control list.
>
> The easiest thing is to create one resource in a administration area of
> the site and attach all the groups to that resource. That way you can
> control access to all the groups via a single access control list - i.e=
.
> the ACL of the resource.  The owner of the resource will be owner of th=
e
> groups.
>
> Jon
>
>