Re: [Openinteract-dev] Object security inheritance

[Chris W. <ch...@cw...>]

Andrew Hurst wrote:
> The only problem I see with this is that I don't use url's of that 
> form.  I use the News style urls:
>
 > /Document/show/?document_id=3
 > /Document/TOC/?document_id=3
 > /DocumentPage/show/?document_page_id=55
 > etc. etc.

That's okay -- it doesn't matter! The hierarchical security can work 
with any delimited string, and it doesn't matter where the content 
of the string comes from. So you create a non-editable field 
'security_location' and calculate it in an SPOPS pre-save handler so 
it never gets out of sync. Even if it just looks like:

   security_location => '3|55'

That should be ok.

> So it needs to be per-object, rather than per-location (if I'm using the 
> correct terminology).  Thus I think a custom document security edit page 
> would be useful:
> /Document/security/?document_id=N
> 
> When saved, it would set the security settings for all of its 
> DocumentPages using the standard security methods (assuming that they're 
> there, I haven't checked yet).  DocumentPage security would be set with 
> the usual object security editor.  Then I'd get to override security on 
> a per-page basis, and set for the whole document as well...
> 
> Seem like a good idea?

Yep, that would work too -- and be more straightforward!

Chris

-- 
Chris Winters (ch...@cw...)
Building enterprise-capable snack solutions since 1988.