Re: [Openinteract-dev] Object security inheritance

[Andrew H. <hu...@ll...>]

At 01:23 PM 7/31/2003 -0400, Chris Winters wrote:
>Andrew Hurst wrote:
>>...
>
>...
>And then have a custom page/handler to set the security for the main 
>Document which ALSO sets the security for the DocumentPage object of that 
>location. So a Document with a location of:
>
>  /mydocument
>
>Would set security (assuming group, ID 3, level WRITE) for both:
>
>  class            id            scope  scope_id  level
>  OI::Document     /mydocument   g      3         8
>  OI::DocumentPage /mydocument   g      3         8

The only problem I see with this is that I don't use url's of that form.  I 
use the News style urls:

/Document/show/?document_id=3
/Document/TOC/?document_id=3
/DocumentPage/show/?document_page_id=55
etc. etc.

So it needs to be per-object, rather than per-location (if I'm using the 
correct terminology).  Thus I think a custom document security edit page 
would be useful:
/Document/security/?document_id=N

When saved, it would set the security settings for all of its DocumentPages 
using the standard security methods (assuming that they're there, I haven't 
checked yet).  DocumentPage security would be set with the usual object 
security editor.  Then I'd get to override security on a per-page basis, 
and set for the whole document as well...

Seem like a good idea?

-Andrew