Re: [Exist-development] Proposal to change security design of groups

[Adam R. <ad...@ex...>]

> We must think in different strategies: access grant or denied. Very often,
> better to deny access than grant, so removing must be limited to group's
> managres only.
>>
>> 3) "User A" can also delete "Group 1" when he choose because he is the
>> owner of that group. Again this is a case of downgrading users rights.

I disagree. If you own the group, then you can choose to the group as
you wish. However there could be the option of co-owners as suggested
by Chris Tomlinson - this is quite a common requirement in my
experience also.


-- 
Adam Retter

eXist Developer
{ United Kingdom }
ad...@ex...
irc://irc.freenode.net/existdb