RE: [Openinteract-help] per-user rights on static pages

[Chris W. <ch...@cw...>]

On Wed, 2002-01-30 at 16:17, Chris McDaniel wrote:
> Well, that sounds pretty cool too, but actually I wasn't clear on what I
> want to do. I just want to allow a certain user to edit the contents of a
> static page using your html editing form (like the admins can) without
> granting sitewide admin priveledges.  I am still using 1.21, so if this is
> something you've recently added, let me know.

Oh, sure, this shouldn't be a problem. (I have a proclivity to
complicate things sometimes :-)

First: I'd create a group explicitly for this purpose and assign the
user to the group. In very early versions of OI I had per-user security
setting but it made the listing of valid scopes in the security editor
extremely long for sites having a few users. So I took it out and try to
point folks to groups instead.

Second: Allow that group to have write access to the BasicPage handler
(or whatever its called). Normal security editing stuff.

Third: Set the security for the root directory so that only the 'site
admin' group has WRITE access, and then set the security for the
directory you want the user to be able to edit in to allow the created
group to have WRITE access.

To do this in version 1.21 you should be able to go to:

 http://.../Hierarchy/

type in the class to protect (YourSite::BasicPage, IIRC) and the
directory you want to protect as the object ID.

This is easier in later releases (>= 1.30) because the security editing
functions were integrated, but the above should work for you. Hope it
makes sense.

Chris

cc'd to -help for posterity

-- 
Chris Winters (ch...@cw...)
Building enterprise-capable snack solutions since 1988.